Cisco patches exploited CVE-2026-76418 in ASA and FTD firewalls

Unauthenticated remote attackers can exploit the Remote Access SSL VPN service to force affected firewalls to restart, interrupting access. The vulnerability has a CVSS severity score of 8.6 and is being exploited in the wild. Cisco has released security updates for its Secure Firewall ASA and FTD software.

• SecurityWeek calls it the second exploited Cisco firewall VPN zero-day since August.

Covered by 4 publishers within 5 hours of the first report.

• Cyber Security News: Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Crash SSL VPN Devices

Reporting4

CSN Cyber Security News Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Crash SSL VPN Devices · Abinaya 2:21 AM

SW SecurityWeek Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August · Eduard Kovacs 5:47 AM

THN The Hacker News Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls · info@thehackernews.com (The Hacker News) 6:44 AM

BC BleepingComputer New Cisco firewall zero-day exploited to crash SSL VPN devices · Sergiu Gatlan 7:10 AM

Discussion

Y Hacker News 2 points, 0 comments

Related

THN China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility October 29

BC Volt Typhoon used Silent Train network to conceal zero-day attacks October 28

CSN Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List October 22

CS Prolific Chinese espionage group exploits BeyondTrust zero-day October 15

Topics Zero-day vulnerabilities