CVE-2026-20105 — Missing Release of Memory after Effective Lifetime in Cisco Secure Firewall Adaptive Security Appliance Software

CWE-401 — Missing Release of Memory after Effective LifetimeCWE-120 — Classic Buffer OverflowCWE-330 — Use of Insufficiently Random ValuesCWE-770 — Allocation of Resources Without Limits or Throttling4 documents4 sources
Severity
7.7HIGHNVD
EPSS
0.1%
top 72.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Secure Firewall Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense Software
Timeline
PublishedMar 4
Latest updateMar 5

Description

A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with a valid VPN connection to exhaust device memory resulting in a denial of service (DoS) condition.This does not affect the management or MUS interfaces. This vulnerability is due to trusting user input without validation. An attacker could exploit this vulnerability by sen…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 3.1 | Impact: 4.0

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
CVE-2026-20105: A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Thr↗2026-03-04
▶
GHSA
GHSA-x2pv-vmm7-rhwr: A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Thr↗2026-03-04
▶

📋Vendor Advisories

1
Cisco
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities↗2026-03-05
▶
CVE-2026-20105 — Cisco vulnerability | cvebase