Is CVE-2026-20024 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-20024 being exploited in the wild.

How severe is CVE-2026-20024?

Medium severity, with a CVSS score of 6.8, published 4 March 2026.

Is there a fix for CVE-2026-20024?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-20024 attacked?

It is attacked from the adjacent network, in an operating system.

Am I affected by CVE-2026-20024?

Check whether you run Cisco Secure Firewall ASA Software or Cisco Secure Firewall Threat Defense Software. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-20024: Cisco ASA and FTD Software heap corruption in OSPF protocol

CVE-2026-20024 · Severity: medium · CVSS 6.8 · Published 2026-03-04

Cisco Secure Firewall ASA and FTD software, which are used to protect corporate networks and manage traffic, contain a vulnerability in their OSPF routing protocol. An attacker who has already gained access to the local network and obtained the OSPF secret key could send malicious traffic to the firewall. This would cause the device to crash and restart, leading to a complete network outage (Denial of Service) for users relying on that firewall.

Technologies: Cisco Secure Firewall ASA Software, Cisco Secure Firewall Threat Defense Software. Vendors: Cisco.

Quick answers

Is CVE-2026-20024 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-20024 being exploited in the wild.
How severe is CVE-2026-20024?: Medium severity, with a CVSS score of 6.8, published 4 March 2026.
Which products and versions are affected?: Cisco Secure Firewall ASA Software; Cisco Secure Firewall Threat Defense (FTD) Software.
Is there a fix for CVE-2026-20024?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-20024 attacked?: It is attacked from the adjacent network, in an operating system.
Am I affected by CVE-2026-20024?: Check whether you run Cisco Secure Firewall ASA Software or Cisco Secure Firewall Threat Defense Software. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A heap corruption vulnerability exists in the OSPF protocol implementation of Cisco ASA and FTD software. The flaw is triggered during the parsing of OSPF packets. An attacker located on the same adjacent network segment who possesses the OSPF secret key can exploit this by sending crafted OSPF packets to the service. Successful exploitation leads to heap memory corruption, causing the device to reload and resulting in a denial of service (DoS). Cisco has released software updates to address this issue, and no workarounds are currently available.

Affected products

Cisco Secure Firewall ASA Software
Cisco Secure Firewall Threat Defense (FTD) Software

Timeline

2026-03-04: advisory: Initial publication by Cisco
2026-03-04: disclosed

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.