CVE-2026-20015
Analyzed Analyzed - Analysis Complete

Memory Leak in Cisco IKEv2 Causes Remote DoS Condition

Publication date: 2026-03-04

Last updated on: 2026-08-11

Assigner: Cisco Systems, Inc.

Description
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may impact the availability of services to devices elsewhere in the network. This vulnerability is due to a memory leak when parsing IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust resources, causing a DoS condition that will eventually require the device to be manually reloaded.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-04
Last Modified
2026-08-11
Generated
2026-08-15
AI Q&A
2026-03-04
EPSS Evaluated
2026-08-14
NVD
CVE-2026-20015
EUVD
EUVD-2026-9432

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
cisco secure_firewall_threat_defense From 7.2.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-401 The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software. It is caused by a memory leak that occurs when the software parses IKEv2 packets.

An unauthenticated, remote attacker can exploit this by sending specially crafted IKEv2 packets to the affected device.

Exploiting this vulnerability can lead to resource exhaustion on the device, causing a denial-of-service (DoS) condition that may require manual reloading of the device.

Detection Guidance

I don't know

Impact Analysis

The vulnerability can impact you by causing a denial-of-service (DoS) condition on the affected Cisco firewall or security device.

This DoS condition can reduce or eliminate the availability of network services to other devices connected to the network.

Ultimately, the affected device may need to be manually reloaded to restore normal operation, potentially causing downtime and disruption.

Compliance Impact

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20015. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart