CVE-2026-20022

The record

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the command debug ip ospf canon. This vulnerability is due to insufficient input validation when processing OSPF LSU packets. An attacker could exploit this vulnerability by sending crafted unauthenticated OSPF packets. A successful exploit could allow the attacker to write to memory outside of the packet data, causing the device to reload, resulting in a DoS condition.

Affected packages

Related vulnerabilities

• CVE-2026-31912 libpcap BPF interpreter detects neither reaching the end of the filter program buffer due… CWE-823
• CVE-2026-72642 The native inference process that Elasticsearch uses to evaluate uploaded machine… CWE-823
• CVE-2026-49746 Software installed and run as a non-privileged user may conduct improper GPU system calls… CWE-823
• CVE-2026-21734 A web page that contains unusual GPU shader code is loaded into the GPU compiler process… CWE-823
• CVE-2026-34193 Kernel software installed and running inside a Guest/Host VM may post improper commands… CWE-823
• CVE-2026-28764 MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability CWE-823
• CVE-2026-42946 A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that… CWE-823
• CVE-2026-41907 uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. CWE-823