CVE-2026-20102

score

<0.1

cvss

6.1

epss

0.3%

published

2026-03-04

kev added

—

first seen

2026-10-21

Cisco Secure Firewall ASA and Threat Defense Software contain a reflected XSS caused by insufficient input validation of multiple HTTP parameters in the SAML 2.0 SSO feature, letting unauthenticated remote attackers access sensitive browser information, exploit requires user interaction.