Cross-Site Scripting Vulnerability in Cisco Secure Firewall Products
CVE-2026-20102

6.1MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Secure Firewall Adaptive Security Appliance (asa) Software
Cisco Secure Firewall Threat Defense (ftd) Software
Vendor
CVE Published:
4 March 2026

Badges

👾 Exploit Exists

What is CVE-2026-20102?

A vulnerability in the SAML 2.0 single sign-on feature of Cisco Secure Firewall ASA and Threat Defense Software allows unauthenticated remote attackers to perform cross-site scripting (XSS) attacks. This issue is caused by inadequate input validation of several HTTP parameters. An attacker could exploit this vulnerability by convincing a user to visit a fraudulent link, leading to the potential for reflected XSS attacks, which may expose sensitive browser-based information.

Affected Version(s)

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.1

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.1.28

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.2

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.