Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.0

Cisco Secure FTD Software allows local attackers to execute arbitrary commands

CVE-2026-20017 · published 8 months ago
Summary

An attacker with valid admin credentials on a Cisco Secure FTD device can run unauthorized system commands as the root user. This is a concern because it allows an attacker to gain elevated privileges and potentially take control of the system. To mitigate this risk, ensure that you keep your Cisco Secure FTD software up-to-date with the latest patches and restrict administrative access to only authorized personnel.

Original advisory text
A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To exploit this vulner...
A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. To exploit this vulnerability, the attacker must have valid administrative credentials on an affected device.

This vulnerability is due to insufficient input validation of user-supplied command arguments. An attacker could exploit this vulnerability by submitting crafted input for a specific CLI command. A successful exploit could allow the attacker to execute commands on the underlying operating system as root.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
6.0 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-250Execution with Unnecessary Privileges
Timeline
Published4 Mar 2026
Updated30 Oct 2026
First seen6 Mar 2026
Sources
CVE-2026-20017 · NVD
Track software like this
Free during beta