PT-2026-23037 · Cisco · Cisco Secure Ftd+2

Jason Crowder · Published 2026-03-04 · Updated 2026-05-04 · CVE-2026-20020

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (affected versions not specified)

Description A flaw exists in the OSPF protocol that may allow a nearby attacker to cause an unexpected reload of a device, leading to a denial of service. The issue stems from inadequate validation of input when handling OSPF update packets. An attacker could exploit this by sending specially crafted OSPF update packets, potentially triggering a buffer overflow and causing the device to reload. If OSPF authentication is enabled, the attacker needs to know the secret key to successfully exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-20020

Affected Products

Cisco Asa

Cisco Secure Ftd

Cisco Secure Firewall Asa

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-20020 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2029415727665480108 · Twitter Post
• https://twitter.com/CVEnew/status/2029272777379745884 · Twitter Post
• https://t.me/cveNotify/162025 · Telegram Post