ASA / Firepower Threat Defense 7.2 vulnerabilities

19 advisories affect Cisco ASA / Firepower Threat Defense 7.2, 8 already exploited by attackers. Latest: October 29, 2026.

Running ASA / Firepower Threat Defense 7.2 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on ASA / Firepower Threat Defense 7.2 alerts

Vulnerability	Severity	Affected versions
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability CVE-2026-76418 · October 29, 2026	High 8.6 Exploited	19 versions, from 7.2.0 to 7.2.12
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability CVE-2026-76418 · October 28, 2026	High 8.6 Exploited	19 versions, from 7.2.0 to 7.2.12
Multiple Cisco Products Snort 3 Security Hardening Release: October 2026 CVE-2026-20043 +3 · October 22, 2026	Critical 9	18 versions, from 7.2.0 to 7.2.11
Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability CVE-2026-20011 · October 22, 2026	Medium 5.8	18 versions, from 7.2.0 to 7.2.11
Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities CVE-2026-20019 +3 · October 22, 2026	Medium 5.8	18 versions, from 7.2.0 to 7.2.11
Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability CVE-2026-20221 · October 22, 2026	Medium 5.8	18 versions, from 7.2.0 to 7.2.11
Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability CVE-2026-20218 · October 22, 2026	Medium 5.8	18 versions, from 7.2.0 to 7.2.11
Multiple Cisco Products Snort 3 Denial of Service Vulnerability CVE-2026-76445 · October 22, 2026	Medium 5.3	18 versions, from 7.2.0 to 7.2.11
Cisco Advance Notification for Publication of October 21, 2026, Security Advisories CVE-2026-20043 +12 · October 21, 2026	Critical 9	18 versions, from 7.2.0 to 7.2.11
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability CVE-2024-20260 · September 23, 2026	High 8.6	17 versions, from 7.2.0 to 7.2.10.2
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability CVE-2026-20154 · September 18, 2026	High 8.6	17 versions, from 7.2.0 to 7.2.10.2
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability CVE-2026-20249 · September 18, 2026	High 8.6	18 versions, from 7.2.0 to 7.2.11
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability CVE-2026-20248 · September 18, 2026	Medium 6.8	18 versions, from 7.2.0 to 7.2.11
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability CVE-2026-20349 · August 11, 2026	High 8.6 Exploited	18 versions, from 7.2.0 to 7.2.11
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability CVE-2025-20333 · September 25, 2025	Critical 9.9 Exploited	14 versions, from 7.2.0 to 7.2.8.1
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability CVE-2025-20362 · September 25, 2025	Medium 6.5 Exploited	16 versions, from 7.2.0 to 7.2.10
Cisco ASA and FTD Denial-of-Service Vulnerability CVE-2024-20481 · October 24, 2024	Medium 5.8 Exploited	14 versions, from 7.2.0 to 7.2.8.1
Cisco ASA and FTD Denial of Service Vulnerability CVE-2024-20353 · April 24, 2024	High 8.6 Exploited	9 versions, from 7.2.0 to 7.2.5.1
Cisco ASA and FTD Privilege Escalation Vulnerability CVE-2024-20359 · April 24, 2024	Medium 6 Exploited	9 versions, from 7.2.0 to 7.2.5.1

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other ASA / Firepower Threat Defense versions: 10.1 · 10.0 · 9.24 · 9.23 · 9.22 · 9.20 · 9.19 · 9.18 · 9.17 · 9.16 · 9.15 · 9.14 · 9.12 · 9.8 · 7.7 · 7.6 · 7.4 · 7.3 · 7.1 · 7.0 · 6.7 · 6.6 · 6.4 · 6.2