Is CVE-2026-20014 actively exploited?

No active exploitation of CVE-2026-20014 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-20014 be exploited remotely?

Yes. CVE-2026-20014 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-20014?

CVE-2026-20014 has a CVSS score of 7.7 (HIGH).

HOME VULNERABILITIESCVE-2026-20014

HIGH

CVE-2026-20014

CWE-401Published: March 4, 2026· Updated: Mar 5, 2026

7.7

CVSS v3.1

EPSS:0.14%probability of exploitation in 30 daysPercentile:33.2th

Official Description

A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user credentials to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network.

This vulnerability is due to the improper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted, authenticated IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust memory, causing the device to reload.

NVD Source

Technical Analysis

CVE-2026-20014 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.7.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.