CVE-2026-20101

HighCVSS 8.6/10Last modified Aug 11, 2026

Description

A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to insufficient error checking when processing SAML messages. An attacker could exploit this vulnerability by sending crafted SAML messages to the SAML service. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-330

Affected software

Vendor	Product	Versions
Cisco	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software	9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; 9.12.2.9; 9.12.3; 9.12.3.2; 9.12.3.7; 9.12.4; 9.12.3.12; 9.12.3.9; 9.12.2.1; 9.12.4.2; 9.12.4.4; 9.12.4.7; 9.12.4.10; 9.12.4.13; 9.12.4.8
Cisco	Cisco Secure Firewall Threat Defense (FTD) Software	6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; 6.4.0.6; 6.4.0.7; 6.4.0.8; 6.4.0.9; 6.4.0.10; 6.4.0.11; 6.4.0.12; 6.4.0.13; 6.4.0.14; 6.4.0.15; 6.4.0.16; 6.4.0.17; 6.4.0.18; 7.0.0

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbCVendor Advisory

Timeline

Published: Mar 4, 2026
Last modified: Aug 11, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-201026.1A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense CVE-2026-201038.6A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Fi CVE-2026-201046.1A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series S CVE-2026-201057.7A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Fi CVE-2026-201065.3A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (A CVE-2026-201075.5A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated,CVE-2026-201085.4A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to cond CVE-2026-201094.8Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified CVE-2026-20119.8A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /ramonsys/e CVE-2026-201106.5A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) conditio CVE-2026-201114.8A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct CVE-2026-201124.8A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an auth