VIR Vulnerability Intelligence Relay

CVE-2026-20022

medium
Published 2026-03-04 · Modified 2026-05-04
CVSS v3
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
VIR risk
6.5

Description

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the command debug ip ospf canon. This vulnerability is due to insufficient input validation when processing OSPF LSU packets. An attacker could exploit this vulnerability by sending crafted unauthenticated OSPF packets. A successful exploit could allow the attacker to write to memory outside of the packet data, causing the device to reload, resulting in a DoS condition.

Predictions

Exploit likelihood
65%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact
VendorProductVersionsFixed
cisco ciscofirepower_threat_defense_software6.4.0
cisco ciscofirepower_threat_defense_software6.4.0.1
cisco ciscofirepower_threat_defense_software6.4.0.2
cisco ciscofirepower_threat_defense_software6.4.0.3
cisco ciscofirepower_threat_defense_software6.4.0.4
cisco ciscofirepower_threat_defense_software6.4.0.5
cisco ciscofirepower_threat_defense_software6.4.0.6
cisco ciscofirepower_threat_defense_software6.4.0.7
cisco ciscofirepower_threat_defense_software6.4.0.8
cisco ciscofirepower_threat_defense_software6.4.0.9
cisco ciscofirepower_threat_defense_software6.4.0.10
cisco ciscofirepower_threat_defense_software6.4.0.11
cisco ciscofirepower_threat_defense_software6.4.0.12
cisco ciscofirepower_threat_defense_software6.4.0.13
cisco ciscofirepower_threat_defense_software6.4.0.14
cisco ciscofirepower_threat_defense_software6.4.0.15
cisco ciscofirepower_threat_defense_software6.4.0.16
cisco ciscofirepower_threat_defense_software6.4.0.17
cisco ciscofirepower_threat_defense_software6.4.0.18
cisco ciscofirepower_threat_defense_software7.0.0
cisco ciscofirepower_threat_defense_software7.0.0.1
cisco ciscofirepower_threat_defense_software7.0.1
cisco ciscofirepower_threat_defense_software7.0.1.1
cisco ciscofirepower_threat_defense_software7.0.2
cisco ciscofirepower_threat_defense_software7.0.2.1
cisco ciscofirepower_threat_defense_software7.0.3
cisco ciscofirepower_threat_defense_software7.0.4
cisco ciscofirepower_threat_defense_software7.0.5
cisco ciscofirepower_threat_defense_software7.0.6
cisco ciscofirepower_threat_defense_software7.0.6.1
cisco ciscofirepower_threat_defense_software7.0.6.2
cisco ciscofirepower_threat_defense_software7.0.6.3
cisco ciscofirepower_threat_defense_software7.0.7
cisco ciscofirepower_threat_defense_software7.0.8
cisco ciscofirepower_threat_defense_software7.0.8.1
cisco ciscofirepower_threat_defense_software7.1.0
cisco ciscofirepower_threat_defense_software7.1.0.1
cisco ciscofirepower_threat_defense_software7.1.0.2
cisco ciscofirepower_threat_defense_software7.1.0.3
cisco ciscofirepower_threat_defense_software7.2.0
cisco ciscofirepower_threat_defense_software7.2.0.1
cisco ciscofirepower_threat_defense_software7.2.1
cisco ciscofirepower_threat_defense_software7.2.2
cisco ciscofirepower_threat_defense_software7.2.3
cisco ciscofirepower_threat_defense_software7.2.4
cisco ciscofirepower_threat_defense_software7.2.4.1
cisco ciscofirepower_threat_defense_software7.2.5
cisco ciscofirepower_threat_defense_software7.2.5.1
cisco ciscofirepower_threat_defense_software7.2.5.2
cisco ciscofirepower_threat_defense_software7.2.6
cisco ciscofirepower_threat_defense_software7.2.7
cisco ciscofirepower_threat_defense_software7.2.8
cisco ciscofirepower_threat_defense_software7.2.8.1
cisco ciscofirepower_threat_defense_software7.2.9
cisco ciscofirepower_threat_defense_software7.2.10
cisco ciscofirepower_threat_defense_software7.2.10.2
cisco ciscofirepower_threat_defense_software7.3.0
cisco ciscofirepower_threat_defense_software7.3.1
cisco ciscofirepower_threat_defense_software7.3.1.1
cisco ciscofirepower_threat_defense_software7.3.1.2
cisco ciscofirepower_threat_defense_software7.4.0
cisco ciscofirepower_threat_defense_software7.4.1
cisco ciscofirepower_threat_defense_software7.4.1.1
cisco ciscofirepower_threat_defense_software7.4.2
cisco ciscofirepower_threat_defense_software7.4.2.1
cisco ciscofirepower_threat_defense_software7.4.2.2
cisco ciscofirepower_threat_defense_software7.4.2.3
cisco ciscofirepower_threat_defense_software7.4.2.4
cisco ciscofirepower_threat_defense_software7.4.3
cisco ciscofirepower_threat_defense_software7.6.0
cisco ciscofirepower_threat_defense_software7.6.1
cisco ciscofirepower_threat_defense_software7.6.2
cisco ciscofirepower_threat_defense_software7.6.2.1
cisco ciscofirepower_threat_defense_software7.7.0
cisco ciscofirepower_threat_defense_software7.7.10
cisco ciscofirepower_threat_defense_software7.7.10.1

References

CWEs

CWE-823

💬 Discuss CVE-2026-20022 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.