CVE-2026-20103 - Vulnerability Analysis

Overview

Cisco Secure Firewall ASA and FTD Software contain a denial of service vulnerability caused by unvalidated user input in the Remote Access SSL VPN functionality, letting unauthenticated remote attackers exhaust device memory and disrupt new VPN connections, exploit requires sending crafted packets.

Severity & Score

Impact

Unauthenticated remote attackers can cause denial of service by exhausting device memory, disrupting new VPN connections and temporarily affecting the web interface responsiveness.

Mitigation

Update to the latest available version of Cisco Secure Firewall ASA and FTD Software.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner