Search — “CVE-2026-76418”
1 story · 0 IoCs
Stories
P1
Cisco ASA/FTD zero-day CVE-2026-76418 actively exploited for remote DoS crashes of SSL VPN devices; patches released
Cisco PSIRT reports active in-the-wild exploitation of CVE-2026-76418, a DoS flaw in ASA and FTD SSL VPN (webvpn) caused by logic errors when secondary authentication is configured on a tunnel group. Unauthenticated remote attackers can send a crafted request to the SSL remote access VPN and force the device to reload. Cisco provided no IoCs and no details on attackers or targets, so hunters should monitor for unexpected firewall reloads and crash events on webvpn-enabled devices.