CVE-2026-20012 - Vulnerability Analysis

Overview

Cisco IOS, IOS XE, Secure Firewall ASA, and Secure FTD Software contain a denial of service vulnerability caused by improper parsing of IKEv2 packets, letting unauthenticated remote attackers trigger memory leaks and cause device reload or instability, exploit requires sending crafted IKEv2 packets.

Severity & Score

Impact

Unauthenticated remote attackers can cause device reload or memory exhaustion, leading to denial of service and system instability.

Mitigation

Update to the latest available versions of Cisco IOS, IOS XE, Secure Firewall ASA, and Secure FTD Software.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner