LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2026-20103

CVE-2026-20103 - Vulnerability Analysis

HighCVSS: 8.6

Last Updated: March 5, 2026

Cisco Secure Firewall ASA & FTD - Denial of Service

Published: March 4, 2026Updated: March 5, 2026Remote Exploitable

Overview

Cisco Secure Firewall ASA and FTD Software contain a denial of service vulnerability caused by unvalidated user input in the Remote Access SSL VPN functionality, letting unauthenticated remote attackers exhaust device memory and disrupt new VPN connections, exploit requires sending crafted packets.

Severity & Score

Severity: High
CVSS Score: 8.6
EPSS Score: 5.0%(Probability of exploitation in next 30 days)

Impact

Unauthenticated remote attackers can cause denial of service by exhausting device memory, disrupting new VPN connections and temporarily affecting the web interface responsiveness.

Mitigation

Update to the latest available version of Cisco Secure Firewall ASA and FTD Software.

Social Media Activity(2 posts)

Yazoul Alerts
Yazoul Alerts
@Matchbook3469
Mar 5, 2026

🟠 New security advisory: CVE-2026-20103 affects multiple systems. • Impact: Significant security breach potential • Risk: Unauthorized access or data exposure • Mitigation: Apply patches within 24-48 hours Full breakdown: https://yazoul.net/advisory/cve/cve-2026-20103 #Cybersecurity #SecurityPatching #HackerNews

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Mar 4, 2026

🟠 CVE-2026-20103 - High (8.6) A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust device memo... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-20103/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-20103
Severity
High
CVSS Score
8.6
Type
denial_of_service
Status
unconfirmed
EPSS
5.0%
Social Posts
2

CWE

  • CWE-770

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS Score

5.0%Probability of exploitation in the next 30 days