CVE-2026-20222

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (affected versions not specified) Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description An issue in the EIGRP implementation allows an unauthenticated, adjacent attacker to cause a device to reload unexpectedly, leading to a denial of service (DoS) condition. This occurs due to improper resource management when processing EIGRP update messages. An attacker can trigger a memory leak—a failure in a program to release discarded memory—by sending crafted EIGRP updates at a high rate to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.