CVE-2026-20103: Allocation of Resources Without Limits or Throttling

🗓️ 04 Mar 2026 00:00:00Reported by Rapid7Type

A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust device memo...

Reporter	Title	Published	Views	Family All 15
attackerkb	CVE-2026-20103	4 Mar 202617:19	–	attackerkb
BDU FSTEC	The vulnerability of the Remote Access SSL VPN microprogramming-based network interface device from Cisco Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) allows a attacker to cause a service outage.	30 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-20103	4 Mar 202618:23	–	circl
Cisco	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities	4 Mar 202616:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance (ASA) Software VPN DoS Vulnerabilities (cisco-sa-asaftd-vpn-m9sx6MbC)	1 May 202600:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense (FTD) Software VPN DoS Vulnerabilities (cisco-sa-asaftd-vpn-m9sx6MbC)	1 May 202600:00	–	nessus
CNNVD	Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞	4 Mar 202600:00	–	cnnvd
CVE	CVE-2026-20103	4 Mar 202617:19	–	cve
Cvelist	CVE-2026-20103	4 Mar 202617:19	–	cvelist
EUVD	EUVD-2026-9441	4 Mar 202618:31	–	euvd

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-20103
cwe	www.cwe.mitre.org/data/definitions/770.html
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC

11 Aug 2026 00:00Current

CVSS 3.18.6

EPSS0.00351

SSVC

CWE-770