CVE-2026-20013: Medium severity Cisco Secure Firewall ASA Software vulnerability
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network. This vulnerability is due to memory exhaustion caused by not freeing memory during IKEv2 packet processing. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust resources, causing a DoS condition that will eventually require the device to manually reload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20013?
CVE-2026-20013 is classified as a critical vulnerability that can lead to a DoS condition on affected devices.
How do I fix CVE-2026-20013?
To mitigate CVE-2026-20013, update your Cisco Secure Firewall ASA Software and Cisco Secure FTD Software to the latest patched version.
What are the potential consequences of CVE-2026-20013?
Exploitation of CVE-2026-20013 can result in a DoS condition that affects the availability of services on the device and potentially on other devices in the network.
Which products are affected by CVE-2026-20013?
CVE-2026-20013 impacts Cisco Secure Firewall ASA Software and Cisco Secure FTD Software.
Who can exploit CVE-2026-20013?
CVE-2026-20013 can be exploited by unauthenticated remote attackers.