LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2026-20101

CVE-2026-20101 - Vulnerability Analysis

HighCVSS: 8.6

Last Updated: March 5, 2026

Cisco Secure Firewall ASA & Secure FTD - Denial of Service

Published: March 4, 2026Updated: March 5, 2026Remote Exploitable

Overview

Cisco Secure Firewall ASA Software and Secure FTD Software contain a denial of service vulnerability caused by insufficient error checking in SAML 2.0 SSO message processing, letting unauthenticated remote attackers cause device reloads, exploit requires sending crafted SAML messages.

Severity & Score

Severity: High
CVSS Score: 8.6
EPSS Score: 10.5%(Probability of exploitation in next 30 days)

Impact

Unauthenticated remote attackers can cause device reloads, resulting in denial of service.

Mitigation

Update to the latest available version of Cisco Secure Firewall ASA Software and Secure FTD Software.

Social Media Activity(2 posts)

Yazoul Alerts
Yazoul Alerts
@Matchbook3469
Mar 5, 2026

🟠 New security advisory: CVE-2026-20101 affects multiple systems. • Impact: Significant security breach potential • Risk: Unauthorized access or data exposure • Mitigation: Apply patches within 24-48 hours Full breakdown: https://yazoul.net/advisory/cve/cve-2026-20101 #Cybersecurity #SecurityPatching #HackerNews

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Mar 4, 2026

🟠 CVE-2026-20101 - High (8.6) A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. ... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-20101/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-20101
Severity
High
CVSS Score
8.6
Type
denial_of_service
Status
unconfirmed
EPSS
10.5%
Social Posts
2

CWE

  • CWE-330

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS Score

10.5%Probability of exploitation in the next 30 days