OSPF Protocol Vulnerability in Cisco Secure Firewall and FTD Software

CVE-2026-20020

What is CVE-2026-20020?

A vulnerability has been identified in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software. This issue arises from insufficient input validation when processing OSPF update packets, which could allow an unauthenticated attacker on the same network segment to execute a denial-of-service (DoS) attack. By sending specially crafted OSPF update packets, an attacker can manipulate the buffer, leading to an unexpected device reload. Although OSPF authentication provides a layer of security, the attacker must possess the secret key for exploitation. This situation highlights the importance of securing OSPF configurations to mitigate potential risks.

References