Cisco reports actively exploited zero‑day in ASA/FTD SSL VPN, added to CISA KEV list
Cisco disclosed CVE‑2026‑76418 on 28 October 2026, a high‑severity (CVSS 8.6) flaw in the Remote Access SSL VPN of its Secure Firewall ASA and FTD software that lets an unauthenticated attacker force a device reload, causing denial‑of‑service. The vulnerability is being exploited in the wild and Cisco has issued patches for the affected releases. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) placed the flaw on its Known Exploited Vulnerabilities (KEV) catalog on 29 October 2026 with a compliance deadline of 1 November 2026.
Why it matters
The advisory means organisations using vulnerable ASA or FTD appliances must apply Cisco’s patches immediately to avoid service interruptions; federal agencies must remediate by 1 Nov 2026 to stay compliant with CISA directives.
Key facts
- 1Cisco disclosed CVE‑2026‑76418 on 28 October 2026. socprime.com
- 2The flaw scores CVSS 3.1 8.6 and is classified as high severity. tech-insider.org
- 3Exploitation was observed in October 2026, with attacks causing firewall reloads. tech-insider.org
- 4Cisco released security updates that fix the vulnerability for the affected ASA and FTD software trains. socprime.com
- 5CISA added the vulnerability to its KEV catalog on 29 October 2026. rescana.com
- 6CISA set a federal remediation due date of 1 November 2026 for the KEV entry. rescana.com
Summary written by AlphAI AI Desk from 3 of 3 sources. Not investment advice. Figures are as stated by the linked sources.