CVE-2026-20102

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description A flaw exists in the SAML 2.0 single sign-on (SSO) feature that could permit an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against the SAML feature and obtain sensitive, browser-based information. This is caused by inadequate validation of multiple HTTP parameters. An attacker could exploit this by convincing a user to access a malicious link, potentially leading to a reflected XSS attack through an affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.