Memory Exhaustion Vulnerability in Cisco Secure Firewall Adaptive Security Appliance

CVE-2026-20106

What is CVE-2026-20106?

A vulnerability in the Remote Access SSL VPN and HTTP management functionality of Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software can be exploited by an unauthenticated, remote attacker. By sending specially crafted packets to the Remote Access SSL VPN server, the attacker could exhaust device memory. This exploitation may result in a denial of service condition, necessitating a manual reboot to restore functionality. The root cause lies in the system's failure to appropriately validate user input, leaving it susceptible to potential attacks.

References