CVE WatchAug 11, 2026

CVE-2024-20431

A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, r

CVSS

5.8

Medium

EPSS

0.4%

p33

KEV

—

Exploit Today

0-100

Published: Oct 23, 2024 · Last modified: Aug 11, 2026 · CWE-229

EPSS · 30d

0.4%EPSS · 30 days0.4%

2026-08-022026-08-31

Technical description

A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy. This vulnerability is due to improper assignment of geolocation data. An attacker could exploit this vulnerability by sending traffic through an affected device. A successful exploit could allow the attacker to bypass a geolocation-based access control policy and successfully send traffic to a protected device.

Official references

sec.cloudapps.cisco.comhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-geoip-bypass-MB4zRDu

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-595668.4 HIG

2.2%

——1A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.3d CVE-2026-595658.8 HIG

18.9%

——6A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.3d CVE-2025-35973—

1.0%

——0Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.19d CVE-2026-456029.1 CRI

29.5%

——9No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.42d CVE-2025-590327.5 HIG

50.8%

——15ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.48d