Cisco ASA and FTD syslog 419002 rate-limiting flaw (CVE-2026-20154) allows unauthenticated remote DoS via SYN flood
Cisco disclosed CVE-2026-20154, a high-severity vulnerability in the system rate-limiting process for syslog message 419002 in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. An unauthenticated, remote attacker can cause high CPU utilization on an affected device, r…