CVE-2026-76418: Cisco ASA and FTD VPN Flaw Actively Exploited

# CVE-2026-76418: Cisco ASA and FTD VPN Flaw Actively Exploited

https://gcdradar.vercel.app/incidents/cve-2026-76418-cisco-asa-and-ftd-vpn-flaw-actively-exploited · AIR-2026-1630 · closed 2026-11-12

- Lane: Patch now
- Severity: 3 (Confirmed exploitation): Exploited in the wild, CVSS 8.6.
- Fix status: Patched
- First reported: 2026-10-29
- AI role: No AI role
- Products: Cisco ASA, Cisco FTD
- CVE ids: CVE-2026-76418
- CVSS: 8.6

## Summary

Cisco released patches for CVE‑2026‑76418, a remote code execution flaw in ASA and FTD software that is being exploited in the wild. The vulnerability scores 8.6 CVSS and could allow unauthenticated attackers to crash firewalls.

## What to do

Apply the Cisco ASA and FTD patches released for CVE‑2026‑76418.

## Latest updates

- 2026-10-29: Added to the CISA KEV catalog (exploitation confirmed) (https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418)
- 2026-10-29: Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August (https://securityweek.com/attackers-exploit-second-cisco-firewall-vpn-zero-day-since-august)
- 2026-10-29: New Cisco firewall zero-day exploited to crash SSL VPN devices (https://bleepingcomputer.com/news/security/cisco-warns-of-firewall-zero-day-exploited-to-crash-ssl-vpn-devices)
- 2026-10-29: Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls (https://thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html)

## Sources

- 2026-10-29 The Hacker News: Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls https://thehackernews.com/2026/10/cisco-patches-actively-exploited-asa.html
- 2026-10-29 BleepingComputer: New Cisco firewall zero-day exploited to crash SSL VPN devices https://bleepingcomputer.com/news/security/cisco-warns-of-firewall-zero-day-exploited-to-crash-ssl-vpn-devices
- 2026-10-29 SecurityWeek: Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August https://securityweek.com/attackers-exploit-second-cisco-firewall-vpn-zero-day-since-august
- 2026-10-29 CISA: CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.