Uzha
Sign in
← Today's brief

Security · Updated 29 Oct, 04:40 pm IST

Cisco patches exploited ASA and FTD SSL VPN zero-day causing firewall crashes

Image: The Hacker News

Why it matters for readers: It matters because attackers can remotely crash some Cisco firewalls via the VPN feature, and updates are available.

  • The vulnerability is tracked as CVE-2026-76418 and has a CVSS score of 8.6.1
  • Cisco says the bug stems from logic errors when secondary authentication is configured on a tunnel group and can be exploited via the SSL remote access VPN.12
  • Cisco's PSIRT became aware of active exploitation in October 2026 but did not disclose attack specifics or indicators of compromise.12
  • Patches are available for ASA/FTD releases (examples: 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.48) and Cisco strongly recommends customers upgrade.1
SaveAsk about this story
Report a mistake in this summary

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started

How this story developed

  1. 29 Oct, 04:14 pm · The Hacker News

    Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls

  2. 29 Oct, 04:40 pm · BleepingComputer

    New Cisco firewall zero-day exploited to crash SSL VPN devices