Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the SAML feature and access sensitive, browser-based information. This vulnerability is due to insufficient input validation of multiple HTTP parameters. An attacker could exploit this vulnerability by persuading a user to access a malicious link. A successful exploit could allow the attacker to conduct a reflected XSS attack through an affected device.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-20102 Cross-Site Scripting Vulnerability in Cisco Secure Firewall SAML SSO Feature https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20102
Post summary
The brief note identifies CVE-2026-20102 as a cross‑site scripting flaw in Cisco Secure Firewall SAML SSO but offers no further detail or actionable information.
CVE-2026-20102 A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow… https://www.cve.org/CVERecord?id=CVE-2026-20102
Post summary
A new CVE (CVE-2026-20102) affecting Cisco Secure Firewall ASA and FTD software’s SAML 2.0 SSO feature is announced, with limited technical detail and no mention of patches or exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | cisco | adaptive_security_appliance_software | - | - | - |
| App | cisco | secure_firewall_threat_defense | - | - | - |