Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
Summary: Cisco released patches for CVE-2026-76418, an 8.6-severity flaw in the Remote Access SSL VPN service of Secure Firewall ASA and FTD Software, caused by logic errors when secondary authentication is configured on a tunnel group. An unauthenticated remote attacker can send a crafted request during an SSL VPN connection to make the device reload, causing a denial-of-service condition, and Cisco said it became aware of active exploitation in October 2026 without disclosing who is behind the attacks or their scale.
Bottom line: Cisco confirms this flaw is already being exploited in the wild, and a successful VPN login is not required to reach the affected processing path - so an unauthenticated attacker who can reach your SSL VPN interface can crash the firewall itself.
Read the original at The Hacker News ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2026-20127CVE-2026-76418
- Related