Cisco Secure Firewall ASA and FTD Vulnerability (CVE-2026-76418)
Cisco has released fixes for an actively exploited zero-day vulnerability (CVE-2026-76418) in the Remote Access SSL VPN service of its Secure Firewall ASA and FTD software.
CVE search metadata
CVE search record: CVE-2026-76418. Severity: high. CVSS: 8.6. KEV: no. Product: Secure Firewall Adaptive Security Appliance (ASA), Secure Firewall Threat Defense (FTD). Brief: Cisco Secure Firewall ASA and FTD Vulnerability (CVE-2026-76418). Brief link: https://feed.craftedsignal.io/briefs/2026-10-cisco-firewall-dos/
Triage facts
Revision 1- Applicability
- Secure Firewall Adaptive Security Appliance (ASA), Secure Firewall Threat Defense (FTD)
- Evidence
- Confirmed activeHigh confidence
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 29, 10:03 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C2Likely
Cisco has issued patches for a vulnerability (CVE-2026-76418) affecting the Remote Access SSL VPN service in its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. The vulnerability, which has a CVSS score of 8.6, can be exploited by an unauthenticated, remote attacker to force the device. Cisco has confirmed the vulnerability is being actively exploited.