Cisco · Cisco Secure Firewall Threat Defense (Ftd) · CVE-2026-20102
**Name of the Vulnerable Software and Affected Versions**
Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)
**Description**
A flaw exists in the SAML 2.0 single sign-on (SSO) feature that could permit an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against the SAML feature and obtain sensitive, browser-based information. This is caused by inadequate validation of multiple HTTP parameters. An attacker could exploit this by convincing a user to access a malicious link, potentially leading to a reflected XSS attack through an affected device.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.