Class familyCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Cisco ASA infinite loop flaws, 2024–2026
5 Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) CVEs with CWE-835 weaknesses, 24 Apr 2024 to 16 Sep 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2024’24
3 2025’25
1 2026’26
In CISA KEVNot in KEV
20241 CVE, 1 in KEV
20253 CVEs
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2024-20353KEV | 24 Apr 2024 | Cisco ASA and FTD Denial of Service Vulnerability | Grouped by weakness | 85.0 |
| CVE-2025-20136 | 14 Aug 2025 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Translation DNS Inspection… | Grouped by weakness | 16.1 |
| CVE-2025-20243 | 14 Aug 2025 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN… | Grouped by weakness | 15.9 |
| CVE-2025-20253 | 14 Aug 2025 | Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2… | Grouped by weakness | 14.1 |
| CVE-2026-20154 | 16 Sep 2026 | Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial… | Grouped by weakness | 15.5 |