CVE-2026-76418

CVE Enrichment

CVSS: 8.6 HIGH
EPSS: 0.57%
EPSS Percentile: 47.31%
CISA KEV: Not listed

Description

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 29-Oct-2026 03:18
Last Modified: 29-Oct-2026 22:04
EPSS Date: 2026-10-29
CWE: CWE-690

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:C /
                            C:N /
                            I:N /
                            A:H

References

[email protected]

Last enrichment sync: 30-Oct-2026 00:16
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (5)

Cisco has released security updates for CVE-2026-76418, a high-severity zero-day vulnerability affecting the Remote Access SSL VPN service in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Cisco Patches Actively Exploited CVE-2026-76418 in Secure Firewall SSL VPN
CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability CISA Adds Two Actively Exploited Vulnerabilities to KEV Catalog
The vulnerability, tracked as CVE-2026-76418, is rated 8.6 on the CVSS scoring system. Successful exploitation could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote Access SSL VPN service. Cisco Patches Exploited ASA and FTD SSL VPN Zero-Day
Tracked as CVE-2026-76418, this high-severity vulnerability affects devices running ASA and FTD software with configurations containing the 'webvpn' keyword and SSL VPN enabled on at least one interface. Cisco Patches Actively Exploited ASA and FTD Zero-Day That Crashes SSL VPN Devices

CVE (3)

Malware (3)

People (1)

Threat Actors (2)

MITRE ATT&CK (5)

Vendors (2)

Products (15)

Industries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.