CVE-2026-20295

Name of the Vulnerable Software and Affected Versions Cisco Secure FMC Software (affected versions not specified) Cisco Secure FTD Software (affected versions not specified)

Description An issue exists in the sftunnel inter-device communication protocol during the TLS connection setup. An unauthenticated remote attacker can cause a Denial of Service (DoS) condition by sending crafted sftunnel TLS frames to an affected device, leading to the exhaustion of available memory resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.