CVE-2026-76418

● Known-exploited HIGH

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unaut...

Affects 0 products across 1 vendor.

CVSS 3.18.6
EPSS0.8%
Percentile57th
PatchUnknown
Known-exploited since2026-10-29
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, can impact systems beyond the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-690: CWE-690
◆ AI Analysis — automated analysis, not human-reviewed

A high severity vulnerability (CVE-2026-76418) affects the target system. A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to re...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-76418?
A high severity vulnerability (CVE-2026-76418) affects the target system. A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to re...
What is the CVSS score for CVE-2026-76418?
CVE-2026-76418 has CVSS 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H. EPSS: 0.8%.
Is CVE-2026-76418 actively exploited?
Yes. CVE-2026-76418 is in the CISA known-exploited catalog (added 2026-10-29). Active exploitation confirmed. Immediate patching required.
How do I remediate CVE-2026-76418?
Advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75
What systems are affected by CVE-2026-76418?
CVE-2026-76418 affects Cisco.
Vulnerability Details
CVE IDCVE-2026-76418
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Published2026-10-28
Last Modified2026-10-30
ICS Relevance65%
Weakness (CWE)
CWE-690
SourceNVD
Official Description

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Cisco — —
Cisco Adaptive Security Appliance Software 9.24.10 < 9.16.4.104 ≥ 9.18, < 9.18.4.96 ≥ 9.19, < 9.20.4.50 ≥ 9.22, < 9.22.3.200 ≥ 9.23, < 9.23.1.48
+1 more≥ 9.24.1, < 9.24.1.27
Cisco Secure Firewall Threat Defense 10.1.0 < 7.0.11 ≥ 7.2.0, < 7.2.13 ≥ 7.3.0, < 7.4.9 ≥ 7.6.0, ≤ 7.6.7 ≥ 7.7.0, < 7.7.14
+1 more≥ 10.0.0, < 10.0.3
Remediation
View Vendor Advisory →
Threat Intelligence
● Threat Intelligence Validated: November 2026 | Threat Age: 6 Days
CISA known-exploited● Active Exploitation Confirmed (added 2026-10-29)
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Cisco
CVE-1999-0775 10.0 Cisco Gigabit Switch routers running IOS allow remote attackers to forward un... CVE-2002-1357 10.0 Multiple SSH2 servers and clients do not properly handle packets or data elem... CVE-2010-0600 10.0 Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.de... CVE-2011-0382 10.0 The CGI subsystem on Cisco TelePresence Recording Server devices with softwar... CVE-2013-5486 10.0 Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server ...
View all Cisco CVEs →

This Vulnerability Is Being Actively Exploited

CVE-2026-76418 is on the CISA known-exploited list - confirmed active exploitation in the wild. BreachSpider flags known-exploited CVEs on the ICS assets they affect, with known-exploited status synced daily from CISA.

Create a free account →