CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
8.6CVSS base score · high (NVD)
ExploitedIn CISA KEV · federal patch deadline Nov 1, 2026
What happened
Cisco released patches for an exploited vulnerability in Secure Firewall ASA and FTD software affecting the Remote Access SSL VPN service. CVE-2026-76418 has a CVSS score of 8.6 and allows remote unauthenticated attackers to exploit the flaw. This is the second Cisco firewall zero-day exploited since August. Organizations running vulnerable Firewall ASA and FTD instances should apply patches immediately.
From the Intel60 brief of Oct 29, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalCisco Firewall VPN zero-day CVE-2026-76418 exploitedOct 29, 2026