Cisco Secure Firewall vulnerabilities

Cisco conducted an internal security review that resulted in a software hardening release addressing multiple internally discovered vulnerabilities in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software. The vulnerabilities tracked by CVE-2026-20331 relate to failure of protection mechanisms (CWE-693).

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated adjacent attacker to corrupt memory on an affected device, resulting in a DoS condition. This is due to memory corruption when parsing OSPF protocol packets.

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated adjacent attacker to cause an unexpected device reload, resulting in a DoS condition when OSPF canonicalization debug is enabled. This is due to insufficient input validation when processing OSPF LSU packets.

A vulnerability in a subset of CLI commands on Cisco Secure Firewall ASA and FTD Software allows an authenticated local attacker with administrator privileges to craft Lua code that could be used on the underlying operating system as root. This exists because user-provided input is not properly sanitized.