CVE-2026-20102

CVE-2026-20102 describes a reflected cross-site scripting (XSS) vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software, stemming from insufficient input validation. An unauthenticated, remote attacker could exploit this by tricking a user into clicking a malicious link, potentially leading to the theft of browser-based sensitive information. With a CVSS score of 6.1 (Medium), this vulnerability has a network attack vector and low attack complexity, requiring user interaction. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received some community discussion and media coverage.