CVE-2026-20100

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description A flaw exists in the LUA interpreter of the Remote Access SSL VPN feature. This issue could allow a remote attacker with a valid VPN connection to trigger an unexpected device reload, leading to a denial of service (DoS) condition. The root cause is a lack of input validation within the LUA interpreter. An attacker can exploit this by sending specially crafted HTTP packets to the Remote Access SSL VPN server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.