A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user credentials to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network. This vulnerability is due to the improper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted, authenticated IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust memory, causing the device to reload.

cisco cisco-sa-asa-scpcxt-filecpy-rgeP73nE: Cisco Secure Firewall Adaptive Security Appliance Software Multiple Context Mode SCP Unauthorized File Access Vulnerability

cisco cisco-sa-fmc-sql-injection-2qH6CcJd_CVE-2026-20003: Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities

cisco cisco-sa-asaftd-ospf-ZH8PhbSW_CVE-2026-20020: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software OSPF Protocol Vulnerabilities

cisco cisco-sa-asa-dos-FCvLD6vR: Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability

cisco cisco-sa-asaftd-esp-dos-uv7yD8P5: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IPsec Denial of Service Vulnerability

According to its self-reported version, Cisco Secure Firewall Threat Defense (FTD) Software is affected by multiple vulnerabilities.

  - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD     Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected     device that may also impact the availability of services to devices elsewhere in the network. This     vulnerability is due to memory exhaustion caused by not freeing memory during IKEv2 packet     processing. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an     affected device. A successful exploit could allow the attacker to exhaust resources, causing a DoS     condition that will eventually require the device to manually reload. (CVE-2026-20013)

  - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD     Software could allow an authenticated, remote attacker with valid VPN user credentials to cause a     DoS condition on an affected device that may also impact the availability of services to devices     elsewhere in the network. This vulnerability is due to the improper processing of IKEv2 packets.
    An attacker could exploit this vulnerability by sending crafted, authenticated IKEv2 packets to an     affected device. A successful exploit could allow the attacker to exhaust memory, causing the     device to reload. (CVE-2026-20014)

  - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD     Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected     device that may impact the availability of services to devices elsewhere in the network. This     vulnerability is due to a memory leak when parsing IKEv2 packets. An attacker could exploit this     vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit could     allow the attacker to exhaust resources, causing a DoS condition that will eventually require the     device to be manually reloaded. (CVE-2026-20015)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities.

  - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD     Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected     device that may also impact the availability of services to devices elsewhere in the network. This     vulnerability is due to memory exhaustion caused by not freeing memory during IKEv2 packet     processing. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an     affected device. A successful exploit could allow the attacker to exhaust resources, causing a DoS     condition that will eventually require the device to manually reload. (CVE-2026-20013)

  - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD     Software could allow an authenticated, remote attacker with valid VPN user credentials to cause a     DoS condition on an affected device that may also impact the availability of services to devices     elsewhere in the network. This vulnerability is due to the improper processing of IKEv2 packets.
    An attacker could exploit this vulnerability by sending crafted, authenticated IKEv2 packets to an     affected device. A successful exploit could allow the attacker to exhaust memory, causing the     device to reload. (CVE-2026-20014)

  - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD     Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected     device that may impact the availability of services to devices elsewhere in the network. This     vulnerability is due to a memory leak when parsing IKEv2 packets. An attacker could exploit this     vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit could     allow the attacker to exhaust resources, causing a DoS condition that will eventually require the     device to be manually reloaded. (CVE-2026-20015)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

ID	Name	Product	Family	Type	Severity
311457	Cisco Firepower Threat Defense (FTD) Software IKEv2 DoS Vulnerabilities (cisco-sa-asaftd-ikev2-dos-eBueGdEG)	Nessus	CISCO	Combined	high
311449	Cisco Adaptive Security Appliance (ASA) Software IKEv2 DoS Vulnerabilities (cisco-sa-asaftd-ikev2-dos-eBueGdEG)	Nessus	CISCO	Local	high

Detections

Analytics

CVE-2026-20014

high

Tenable Plugins

Coming Soon

high

high