Denial of Service Vulnerability in Cisco IOS and Secure Firewall Products

CVE-2026-20012

What is CVE-2026-20012?

A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS and Secure Firewall products could be exploited by an unauthenticated remote attacker. This vulnerability stems from improper parsing of IKEv2 packets, allowing the attacker to send specially crafted packets to the affected device. A successful exploitation may lead to a memory leak, causing the device to become unstable or fully reload, resulting in a denial of service condition. Users may experience an inability to establish new IKEv2 VPN sessions, and a manual reboot of the device is necessary to restore functionality.

References