Denial of Service Vulnerability in Cisco Secure Firewall ASA and FTD Software

CVE-2026-20222

What is CVE-2026-20222?

A vulnerability exists within the EIGRP implementation of Cisco's Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) software. This weakness can be exploited by an unauthenticated adjacent attacker, who may send specially crafted EIGRP update messages at high rates. Such activity can lead to improper resource management, ultimately causing the device to experience a memory leak and reload unexpectedly, resulting in a denial of service (DoS) condition. It's crucial for organizations using affected Cisco products to review their configurations and apply any necessary security updates to mitigate this risk.

References