CVE-2026-20249

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (affected versions not specified) Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description A logic error in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) allows an unauthenticated remote attacker to cause a device to reload unexpectedly. By attempting to establish an IKEv2 VPN connection using a crafted certificate, an attacker can crash the IKEv2 process, resulting in a denial of service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.