Signal is active with 18 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2026-11-01. Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
🚨 Cisco patches actively exploited ASA and FTD firewall flaw. CVE-2026-76418 (CVSS 8.6) can let unauthenticated attackers remotely crash affected firewalls, causing denial of service. No successful VPN login required. Details + affected versions ↓ https://thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html
Cisco publishes new DoS vulnerability actively exploited - CVE-2026-76418 "A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition."
Patch CVE-2026-76418 now. This high-severity Cisco Secure Firewall vulnerability is exploited in the wild to trigger SSL VPN DoS reloads on ASA and FTD. #Cisco #CiscoASA #CiscoFTD #CVE202676418 #SSLVPN #ZeroDay #Cybersecurity #Vulnerability https://securityonline.info/cisco-secure-firewall-vulnerability-exploited-ssl-vpn/
Cisco patched an ASA and FTD firewall zero-day that attackers already use to crash SSL VPN devices. CVE-2026-76418 hits setups with webvpn and secondary authentication. The only workaround: turn off secondary auth. Shadowserver sees 51,000+ ASA SSL VPNs online. #Cisco #CiscoASA https://t.co/E1eA4QaqCx
Cisco disclosed CVE-2026-76418, a High-severity DoS flaw in ASA and FTD SSL VPN. When secondary auth is configured for tunnel groups, unauthenticated crafted requests trigger device reboots. Exploitation confirmed in October 2026. Patches are available; apply immediately. #ThreatIntel #CVE #Firewall
CiscoのSSL VPN脆弱性「CVE-2026-76418」が悪用、ASA・FTDの再起動を引き起こす https://rocket-boys.co.jp/security-measures-lab/cisco_ssl_vpn_cve_2026_76418/ #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース
Cisco has patched CVE-2026-76418, an unauthenticated DoS zero-day in ASA and FTD software that has been exploited in the wild. https://www.securityweek.com/attackers-exploit-second-cisco-firewall-vpn-zero-day-since-august/
إذا استخدمت Cisco Secure Firewall لحماية الوصول عن بُعد، فإن ثغرة CVE-2026-76418 تسمح لمهاجم غير مصدق بتعطيل الخدمة من خلال إعادة تحميل الجهاز. لا توجد حلاً مؤقتاً، لذا تطبيق التحديث الأمني فوراً لمنع انقطاع الشبكة. #ثغرة_أمنية #Vulnerability https://t.co/zMYSKIzzfS
🚨 Patch now: Cisco says attackers are exploiting a new ASA/FTD VPN flaw, CVE-2026-76418, to force firewalls to reboot. No VPN login is needed and there is no workaround. Fixed versions are out. Cisco hasn't said who is behind it or how widely. Source: Cisco https://t.co/ddJWbnGN7h
🚨 Cisco warns of active exploitation targeting ASA and FTD VPN devices. ⚠️ The vulnerability, CVE-2026-76418, can trigger a denial-of-service (DoS) condition, potentially disrupting VPN services and remote connectivity. 🔴 Active exploitation reported 🌐 Cisco ASA and FTD devices affected 🛡️ Review Cisco’s advisory and apply available mitigations A VPN disruption can cut off critical remote access when organisations need it most. 👉 Check Cisco’s warning for affected products and recommended actions 👇 https://www.xcademia.com/news/cisco-warns-of-actively-exploited-asa-and-ftd-vpn-dos-vulnerability-cve-2026-76418 #Cisco #CyberSecurity #VPN #CVE202676418 #NetworkSecurity #ThreatIntelligence #InfoSec #Xcademia
Cisco ASA/FTD SSL VPN flaw CVE-2026-76418 (CVSS 8.6) lets an unauthenticated crafted request reload the firewall when secondary auth is set. Cisco saw exploitation in October, and ISA 3000 industrial appliances are affected. Source: Cisco https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75
🚨 Cisco: ASA/FTD SSL VPN DoS exploited (CVE-2026-76418, record pending) ⚠️ Unauthenticated reload when secondary auth is on a tunnel group 📊 CVSS 3.1: 8.6 (Cisco) 🛡️ No workaround; upgrade (ASA 9.22.3.200, FTD 7.4.9…) 🔗 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75 #Cisco #Infosec https://t.co/WFLaX98dqL
‼️Breaking: Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Force Device Restarts Details: https://cybersecuritynews.com/cisco-secure-firewall-0-day-vulnerability-exploited/ Cisco released security updates for actively exploited CVE-2026-76418, a flaw in Secure Firewall ASA and FTD software that lets unauthenticated remote attackers force device restarts, causing denial of service and disrupting remote access. The flaw stems from logic errors in the Remote Access SSL VPN service when secondary authentication is configured on a tunnel group. An attacker can send a crafted request while connecting to the VPN service and trigger an unexpected device reload. A successful VPN login is not required to reach the affected processing path. Cisco’s advisory confirms a denial-of-service issue causing device restarts and service disruptions, but identifies no attackers or victims and reports no confirmed data theft or remote code execution. #cybersecurityNews #Cisco
Cisco ASA ya da FTD'de SSL VPN kullanıyorsanız: giriş yapmadan güvenlik duvarını yeniden başlatan açık saldırılarda kullanıldı. CVE-2026-76418 (CVSS 8,6) ikincil kimlik doğrulama tanımlıysa etkiliyor. Geçici çözüm yok, düzeltilmiş sürümler: https://siberguvenlikhaber.com/haber/cisco-asa-ftd-ssl-vpn-dos-cve-2026-76418-istismar-yama-2026.html?utm_source=x&utm_medium=social&utm_campaign=haber https://t.co/ZROvEe1upn
Critical patch alert: Cisco has addressed CVE-2026-76418, a high-severity SSL VPN flaw in ASA & FTD software that lets unauthenticated attackers crash firewalls. If you’re running versions before 9.16.4.104 (ASA) or 7.0.11 (FTD), update now or disable secondary authentication in tunnel groups or DefaultWEBVPNGroup. Remote access SSL VPN logic misconfigurations are to blame—this isn’t just about credentials, it’s about how VPNs are configured. #Cybersecurity #VPN #Cisco #ASA #FTD #CVE2026 https://thedailytechfeed.com/cisco-urgently-patches-asa-ftd-vpn-flaw-thats-been-exploited/
تُعدّ الثغرة الأمنية التي تم اكتشافها مؤخرًا في جدران الحماية من شركة Cisco، والتي تُعرف بـ CVE-2026-76418، مصدر قلق كبير للمتخصصين في الأمن السيبراني. يتيح هذا الضعف المحتمل للمهاجمين غير المصرح لهم تعطيل أجهزة جدار الحماية (ASA وFTD) عن بُعد، مما يؤدي إلى إنكار الخدمة (DoS). وتجدر الإشارة إلى أن استغلال هذه الثغرة لا يتطلب حتى تسجيل الدخول بنجاح إلى شبكة VPN، مما يجعلها أكثر خطورة. تسلط هذه الحادثة الضوء على أهمية التصحيحات الأمنية السريعة في قطاع التكنولوجيا، حيث يمكن للثغرات المعروفة أن تُستغل بسرعة من قبل الجهات الفاعلة الخبيثة. يُنصح المستخدمون دائمًا بالبقاء على اطلاع بأحدث التحديثات والتصحيحات لضمان حماية أنظمتهم.
🚨 Cisco says attackers are exploiting a new ASA and FTD firewall zero-day, CVE-2026-76418 (CVSS 8.6). No login needed: a crafted SSL VPN request reboots the box if secondary auth is set on a tunnel group. Fixed in ASA 9.24.1.27, FTD 7.7.14 and more. No workaround. Patch now. https://t.co/b1QIMTm0XG
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August Cisco has patched CVE-2026-76418, an unauthenticated DoS zero-day in ASA and FTD software that has been exploited in the wild. https://www.securityweek.com/attackers-exploit-second-cisco-firewall-vpn-zero-day-since-august/ https://t.co/q8K1AeeaIc
csirt_it: ‼️ #Exploited #Cisco: rilevato sfruttamento attivo in rete della CVE-2026-76418 presente in prodotti #SecureFirewall #ASA e #FTD Rischio: 🔴 Tipologia: 🔸 Denial of Service 🔗 https://www.acn.gov.it/portale/w/cisco-rilevato-sfruttamento-in-rete-della-cve-2026-76418 ⚠️ Importante mantenere aggiornati i sis… https://x.com/csirt_it/status/2115735192300134533/photo/1
csirt_it: ‼️ #Exploited #Cisco: rilevato sfruttamento attivo in rete della CVE-2026-76418 presente nei prodotti #SecureFirewall #ASA e #FTD Rischio: 🔴 Tipologia: 🔸 Denial of Service 🔗 https://www.acn.gov.it/portale/w/cisco-rilevato-sfruttamento-in-rete-della-cve-2026-76418 ⚠️ Importante mantenere aggiornati i si… https://t.co/ZYRGjGdgHl