PT-2026-22979 · Cisco · Cisco Secure Firewall Asa+2

Keane Okelley · Published 2026-03-04 · Updated 2026-05-04 · CVE-2026-20100

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description A flaw exists in the LUA interpreter of the Remote Access SSL VPN feature. This issue could allow a remote attacker with a valid VPN connection to trigger an unexpected device reload, leading to a denial of service (DoS) condition. The root cause is a lack of input validation within the LUA interpreter. An attacker can exploit this by sending specially crafted HTTP packets to the Remote Access SSL VPN server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2026-20100

Affected Products

Cisco Asa

Cisco Secure Firewall Asa

Cisco Secure Firewall Threat Defense (Ftd)

References · 5

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20100 · Security Note
• https://t.me/cveNotify/162045 · Telegram Post
• https://t.me/CVEtracker/46333 · Telegram Post
• https://twitter.com/CVEnew/status/2029272809034178896 · Twitter Post