CVE-2026-20018
Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability
Description
A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating system. This vulnerability is due to insufficient validation of the directory path during file synchronization. An attacker could exploit this vulnerability by crafting a directory path outside of the expected file location. A successful exploit could allow the attacker to create or replace any file on the underlying operating system.
Weakness: CWE-27
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Firepower Threat Defense (FTD) Check your version | Firewall / NGFW | cna-assigner |
| Cisco | Cisco Secure Firewall Management Center Check your version | Network & Security Management | cna-assigner |
Vendor-reported products (2)
- Cisco · Cisco Secure Firewall Management Center (FMC)
- Cisco · Cisco Secure Firewall Threat Defense (FTD) Software
Vendor advisory
cisco-sa-ftdfmc-dir-trav-wERgjhWq
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software Path Traversal Vulnerability
Cisco’s rating: Medium (advisory CVSS 5.9) · Published Mar 4, 2026
Bug ID: CSCwq56017
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from