CriticalVulnerabilityOct 29, 2026

Cisco Firewall VPN zero-day CVE-2026-76418 exploited

Cisco released patches for an exploited vulnerability in Secure Firewall ASA and FTD software affecting the Remote Access SSL VPN service. CVE-2026-76418 has a CVSS score of 8.6 and allows remote unauthenticated attackers to exploit the flaw. This is the second Cisco firewall zero-day exploited since August. Organizations running vulnerable Firewall ASA and FTD instances should apply patches immediately.

Vulnerabilities

CVE-2026-76418 CVSS 8.6 Exploited (CISA KEV)

Sources

SecurityWeekRead the original article
The Hacker NewsRead the original article
BleepingComputerRead the original article
CISA KEVRead the original article

AI-written summary. Check the original reporting before acting.