CVE-2026-20101 - Vulnerability Analysis

Overview

Cisco Secure Firewall ASA Software and Secure FTD Software contain a denial of service vulnerability caused by insufficient error checking in SAML 2.0 SSO message processing, letting unauthenticated remote attackers cause device reloads, exploit requires sending crafted SAML messages.

Severity & Score

Impact

Unauthenticated remote attackers can cause device reloads, resulting in denial of service.

Mitigation

Update to the latest available version of Cisco Secure Firewall ASA Software and Secure FTD Software.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner