CVE-2026-20101

Summary

A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to insufficient error checking when processing SAML messages. An attacker could exploit this vulnerability by sending crafted SAML messages to the SAML service. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.1.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.1.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.2.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.2.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.2.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3.12affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.3.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.2.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.8affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.18affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.24affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.26affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.29affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.30affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.35affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.37affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.38affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.39affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.40affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.41affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.47affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.48affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.50affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.52affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.54affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.55affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.56affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.58affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.62affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.65affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.12.4.67affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.1.28affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.11affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.2.14affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.14affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.15affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.19affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.3.23affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.14affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.19affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.27affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.38affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.39affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.42affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.48affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.55affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.57affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.61affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.62affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.67affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.70affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.71affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.76affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.82affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.16.4.84affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.11affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.15affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.20affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.30affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.33affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.39affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.45affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.17.1.46affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.1.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.2.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.2.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.2.8affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.39affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.46affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.53affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.55affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.3.56affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.8affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.24affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.29affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.34affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.40affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.47affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.50affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.52affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.53affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.18.4.57affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.12affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.18affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.24affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.27affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.28affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.31affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.37affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.38affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.42affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.1.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2.21affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.16affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.20affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.1.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.1.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.1.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.1.6affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1.3affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.3affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.4affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.5affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.6affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.7affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.8affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.9affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.10affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.11affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.12affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.13affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.14affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.15affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.16affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.17affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software6.4.0.18affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.0.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.1.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.2.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.3affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.4affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.5affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.6affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.6.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.6.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.6.3affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.7affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.8affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.8.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.1.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.1.0.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.1.0.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.1.0.3affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.0.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.3affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.4affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.4.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.5affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.5.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.6affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.7affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.5.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.8affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.8.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.9affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.10affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.2.10.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.3.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.3.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.3.1.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.3.1.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.1.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2.3affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2.4affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.6.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.6.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.6.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.6.2.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.7.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.7.10affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.7.10.1affected

Weaknesses

  • CWE-330: Use of Insufficiently Random Values

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References