CVE-2026-20101 - Vulnerability Details - OpenCVE

A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to insufficient error checking when processing SAML messages. An attacker could exploit this vulnerability by sending crafted SAML messages to the SAML service. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC

History

Wed, 04 Mar 2026 17:30:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to insufficient error checking when processing SAML messages. An attacker could exploit this vulnerability by sending crafted SAML messages to the SAML service. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Weaknesses		CWE-330
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC
Metrics		cvssV3_1 `{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2026-03-04T17:19:22.576Z

Updated: 2026-03-04T17:19:22.576Z

Reserved: 2025-10-08T11:59:15.370Z

Link: CVE-2026-20101

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-03-04T18:16:25.137

Modified: 2026-03-04T18:16:25.137

Link: CVE-2026-20101

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20101", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.370Z", "datePublished": "2026-03-04T17:19:22.576Z", "dateUpdated": "2026-03-04T17:19:22.576Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-03-04T17:19:22.576Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition.\r\n\r This vulnerability is due to insufficient error checking when processing SAML messages. An attacker could exploit this vulnerability by sending crafted SAML messages to the SAML service. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "versions": [{"version": "9.12.1", "status": "affected"}, {"version": "9.12.1.2", "status": "affected"}, {"version": "9.12.1.3", "status": "affected"}, {"version": "9.12.2", "status": "affected"}, {"version": "9.12.2.4", "status": "affected"}, {"version": "9.12.2.5", "status": "affected"}, {"version": "9.12.2.9", "status": "affected"}, {"version": "9.12.3", "status": "affected"}, {"version": "9.12.3.2", "status": "affected"}, {"version": "9.12.3.7", "status": "affected"}, {"version": "9.12.4", "status": "affected"}, {"version": "9.12.3.12", "status": "affected"}, {"version": "9.12.3.9", "status": "affected"}, {"version": "9.12.2.1", "status": "affected"}, {"version": "9.12.4.2", "status": "affected"}, {"version": "9.12.4.4", "status": "affected"}, {"version": "9.12.4.7", "status": "affected"}, {"version": "9.12.4.10", "status": "affected"}, {"version": "9.12.4.13", "status": "affected"}, {"version": "9.12.4.8", "status": "affected"}, {"version": "9.12.4.18", "status": "affected"}, {"version": "9.12.4.24", "status": "affected"}, {"version": "9.12.4.26", "status": "affected"}, {"version": "9.12.4.29", "status": "affected"}, {"version": "9.12.4.30", "status": "affected"}, {"version": "9.12.4.35", "status": "affected"}, {"version": "9.12.4.37", "status": "affected"}, {"version": "9.12.4.38", "status": "affected"}, {"version": "9.12.4.39", "status": "affected"}, {"version": "9.12.4.40", "status": "affected"}, {"version": "9.12.4.41", "status": "affected"}, {"version": "9.12.4.47", "status": "affected"}, {"version": "9.12.4.48", "status": "affected"}, {"version": "9.12.4.50", "status": "affected"}, {"version": "9.12.4.52", "status": "affected"}, {"version": "9.12.4.54", "status": "affected"}, {"version": "9.12.4.55", "status": "affected"}, {"version": "9.12.4.56", "status": "affected"}, {"version": "9.12.4.58", "status": "affected"}, {"version": "9.12.4.62", "status": "affected"}, {"version": "9.12.4.65", "status": "affected"}, {"version": "9.12.4.67", "status": "affected"}, {"version": "9.16.1", "status": "affected"}, {"version": "9.16.1.28", "status": "affected"}, {"version": "9.16.2", "status": "affected"}, {"version": "9.16.2.3", "status": "affected"}, {"version": "9.16.2.7", "status": "affected"}, {"version": "9.16.2.11", "status": "affected"}, {"version": "9.16.2.13", "status": "affected"}, {"version": "9.16.2.14", "status": "affected"}, {"version": "9.16.3", "status": "affected"}, {"version": "9.16.3.3", "status": "affected"}, {"version": "9.16.3.14", "status": "affected"}, {"version": "9.16.3.15", "status": "affected"}, {"version": "9.16.3.19", "status": "affected"}, {"version": "9.16.3.23", "status": "affected"}, {"version": "9.16.4", "status": "affected"}, {"version": "9.16.4.9", "status": "affected"}, {"version": "9.16.4.14", "status": "affected"}, {"version": "9.16.4.19", "status": "affected"}, {"version": "9.16.4.27", "status": "affected"}, {"version": "9.16.4.38", "status": "affected"}, {"version": "9.16.4.39", "status": "affected"}, {"version": "9.16.4.42", "status": "affected"}, {"version": "9.16.4.48", "status": "affected"}, {"version": "9.16.4.55", "status": "affected"}, {"version": "9.16.4.57", "status": "affected"}, {"version": "9.16.4.61", "status": "affected"}, {"version": "9.16.4.62", "status": "affected"}, {"version": "9.16.4.67", "status": "affected"}, {"version": "9.16.4.70", "status": "affected"}, {"version": "9.16.4.71", "status": "affected"}, {"version": "9.16.4.76", "status": "affected"}, {"version": "9.16.4.82", "status": "affected"}, {"version": "9.16.4.84", "status": "affected"}, {"version": "9.17.1", "status": "affected"}, {"version": "9.17.1.7", "status": "affected"}, {"version": "9.17.1.9", "status": "affected"}, {"version": "9.17.1.10", "status": "affected"}, {"version": "9.17.1.11", "status": "affected"}, {"version": "9.17.1.13", "status": "affected"}, {"version": "9.17.1.15", "status": "affected"}, {"version": "9.17.1.20", "status": "affected"}, {"version": "9.17.1.30", "status": "affected"}, {"version": "9.17.1.33", "status": "affected"}, {"version": "9.17.1.39", "status": "affected"}, {"version": "9.17.1.45", "status": "affected"}, {"version": "9.17.1.46", "status": "affected"}, {"version": "9.18.1", "status": "affected"}, {"version": "9.18.1.3", "status": "affected"}, {"version": "9.18.2", "status": "affected"}, {"version": "9.18.2.5", "status": "affected"}, {"version": "9.18.2.7", "status": "affected"}, {"version": "9.18.2.8", "status": "affected"}, {"version": "9.18.3", "status": "affected"}, {"version": "9.18.3.39", "status": "affected"}, {"version": "9.18.3.46", "status": "affected"}, {"version": "9.18.3.53", "status": "affected"}, {"version": "9.18.3.55", "status": "affected"}, {"version": "9.18.3.56", "status": "affected"}, {"version": "9.18.4", "status": "affected"}, {"version": "9.18.4.5", "status": "affected"}, {"version": "9.18.4.8", "status": "affected"}, {"version": "9.18.4.22", "status": "affected"}, {"version": "9.18.4.24", "status": "affected"}, {"version": "9.18.4.29", "status": "affected"}, {"version": "9.18.4.34", "status": "affected"}, {"version": "9.18.4.40", "status": "affected"}, {"version": "9.18.4.47", "status": "affected"}, {"version": "9.18.4.50", "status": "affected"}, {"version": "9.18.4.52", "status": "affected"}, {"version": "9.18.4.53", "status": "affected"}, {"version": "9.18.4.57", "status": "affected"}, {"version": "9.19.1", "status": "affected"}, {"version": "9.19.1.5", "status": "affected"}, {"version": "9.19.1.9", "status": "affected"}, {"version": "9.19.1.12", "status": "affected"}, {"version": "9.19.1.18", "status": "affected"}, {"version": "9.19.1.22", "status": "affected"}, {"version": "9.19.1.24", "status": "affected"}, {"version": "9.19.1.27", "status": "affected"}, {"version": "9.19.1.28", "status": "affected"}, {"version": "9.19.1.31", "status": "affected"}, {"version": "9.19.1.37", "status": "affected"}, {"version": "9.19.1.38", "status": "affected"}, {"version": "9.19.1.42", "status": "affected"}, {"version": "9.20.1", "status": "affected"}, {"version": "9.20.1.5", "status": "affected"}, {"version": "9.20.2", "status": "affected"}, {"version": "9.20.2.10", "status": "affected"}, {"version": "9.20.2.21", "status": "affected"}, {"version": "9.20.2.22", "status": "affected"}, {"version": "9.20.3", "status": "affected"}, {"version": "9.20.3.4", "status": "affected"}, {"version": "9.20.3.7", "status": "affected"}, {"version": "9.20.3.9", "status": "affected"}, {"version": "9.20.3.10", "status": "affected"}, {"version": "9.20.3.13", "status": "affected"}, {"version": "9.20.3.16", "status": "affected"}, {"version": "9.20.3.20", "status": "affected"}, {"version": "9.22.1.1", "status": "affected"}, {"version": "9.22.1.3", "status": "affected"}, {"version": "9.22.1.2", "status": "affected"}, {"version": "9.22.1.6", "status": "affected"}, {"version": "9.22.2", "status": "affected"}, {"version": "9.23.1", "status": "affected"}, {"version": "9.23.1.3", "status": "affected"}]}, {"vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [{"version": "6.4.0", "status": "affected"}, {"version": "6.4.0.1", "status": "affected"}, {"version": "6.4.0.3", "status": "affected"}, {"version": "6.4.0.2", "status": "affected"}, {"version": "6.4.0.4", "status": "affected"}, {"version": "6.4.0.5", "status": "affected"}, {"version": "6.4.0.6", "status": "affected"}, {"version": "6.4.0.7", "status": "affected"}, {"version": "6.4.0.8", "status": "affected"}, {"version": "6.4.0.9", "status": "affected"}, {"version": "6.4.0.10", "status": "affected"}, {"version": "6.4.0.11", "status": "affected"}, {"version": "6.4.0.12", "status": "affected"}, {"version": "6.4.0.13", "status": "affected"}, {"version": "6.4.0.14", "status": "affected"}, {"version": "6.4.0.15", "status": "affected"}, {"version": "6.4.0.16", "status": "affected"}, {"version": "6.4.0.17", "status": "affected"}, {"version": "6.4.0.18", "status": "affected"}, {"version": "7.0.0", "status": "affected"}, {"version": "7.0.0.1", "status": "affected"}, {"version": "7.0.1", "status": "affected"}, {"version": "7.0.1.1", "status": "affected"}, {"version": "7.0.2", "status": "affected"}, {"version": "7.0.2.1", "status": "affected"}, {"version": "7.0.3", "status": "affected"}, {"version": "7.0.4", "status": "affected"}, {"version": "7.0.5", "status": "affected"}, {"version": "7.0.6", "status": "affected"}, {"version": "7.0.6.1", "status": "affected"}, {"version": "7.0.6.2", "status": "affected"}, {"version": "7.0.6.3", "status": "affected"}, {"version": "7.0.7", "status": "affected"}, {"version": "7.0.8", "status": "affected"}, {"version": "7.0.8.1", "status": "affected"}, {"version": "7.1.0", "status": "affected"}, {"version": "7.1.0.1", "status": "affected"}, {"version": "7.1.0.2", "status": "affected"}, {"version": "7.1.0.3", "status": "affected"}, {"version": "7.2.0", "status": "affected"}, {"version": "7.2.0.1", "status": "affected"}, {"version": "7.2.1", "status": "affected"}, {"version": "7.2.2", "status": "affected"}, {"version": "7.2.3", "status": "affected"}, {"version": "7.2.4", "status": "affected"}, {"version": "7.2.4.1", "status": "affected"}, {"version": "7.2.5", "status": "affected"}, {"version": "7.2.5.1", "status": "affected"}, {"version": "7.2.6", "status": "affected"}, {"version": "7.2.7", "status": "affected"}, {"version": "7.2.5.2", "status": "affected"}, {"version": "7.2.8", "status": "affected"}, {"version": "7.2.8.1", "status": "affected"}, {"version": "7.2.9", "status": "affected"}, {"version": "7.2.10", "status": "affected"}, {"version": "7.2.10.2", "status": "affected"}, {"version": "7.3.0", "status": "affected"}, {"version": "7.3.1", "status": "affected"}, {"version": "7.3.1.1", "status": "affected"}, {"version": "7.3.1.2", "status": "affected"}, {"version": "7.4.0", "status": "affected"}, {"version": "7.4.1", "status": "affected"}, {"version": "7.4.1.1", "status": "affected"}, {"version": "7.4.2", "status": "affected"}, {"version": "7.4.2.1", "status": "affected"}, {"version": "7.4.2.2", "status": "affected"}, {"version": "7.4.2.3", "status": "affected"}, {"version": "7.4.2.4", "status": "affected"}, {"version": "7.6.0", "status": "affected"}, {"version": "7.6.1", "status": "affected"}, {"version": "7.6.2", "status": "affected"}, {"version": "7.6.2.1", "status": "affected"}, {"version": "7.7.0", "status": "affected"}, {"version": "7.7.10", "status": "affected"}, {"version": "7.7.10.1", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Use of Insufficiently Random Values", "type": "cwe", "cweId": "CWE-330"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC", "name": "cisco-sa-asaftd-vpn-m9sx6MbC"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "baseScore": 8.6, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-asaftd-vpn-m9sx6MbC", "discovery": "INTERNAL", "defects": ["CSCwo49932"]}}}}