OSPF Protocol Vulnerability in Cisco Secure Firewall ASA and FTD Software
CVE-2026-20022

6.1MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Secure Firewall Adaptive Security Appliance (asa) Software
Cisco Secure Firewall Threat Defense (ftd) Software
Vendor
CVE Published:
4 March 2026

Badges

👾 Exploit Exists

What is CVE-2026-20022?

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD Software enables an attacker to cause an affected device to unexpectedly reload, leading to a denial of service. This issue arises from inadequate input validation in processing OSPF Link State Update (LSU) packets. An adversary could exploit this by sending specially crafted, unauthenticated OSPF packets. Successful exploitation leads to writing to memory outside of the intended packet data, consequently causing a device reload and resulting in service disruption.

Affected Version(s)

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.12.1

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.12.1.2

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.12.1.3

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.