Cisco patches exploited ASA and FTD SSL VPN flaw CVE-2026-76418
Unauthenticated crafted VPN requests can reload firewalls; CVSS is 8.6 and there is no workaround.
78
Organization
Cisco PSIRT
- Mentions · 7d2
- Mentions · 30d5
- All mentions14
- First seenAug 11, 2026
- Last mentioned1d ago
Timeline
14 articles · newest firstCisco to publish November 4 advisories for ISE, UCS, and UCM
Fixed releases will be named then, and PSIRT plans no further hardening advisories in 2026.
32
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
Actively exploited CVE-2026-76519 lets unauthenticated attackers gain root on Cisco Secure Email Gateway.
86
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco patched actively exploited Secure Email Gateway zero-day CVE-2026-76519 enabling unauthenticated root execution.
86
Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
Cisco will publish October 21, 2026 advisories and fixes for Expressway, IOS XR, Secure Client, Snort, and UC products.
24
Cisco Advance Notification for Publication of October 7, 2026, Security Advisories
Cisco will publish October 7 security advisories and hardening fixes for NX-OS, Meraki, APIC, and related products.
30
Cisco warns of new SD-WAN zero-day exploited in attacks
Cisco says attackers are exploiting critical SD-WAN Manager auth-bypass zero-day CVE-2026-76504.
86
Cisco drops another exploited zero-day, this time a perfect 10
Cisco's CVSS 10.0 CVE-2026-76460 authentication bypass in Identity Services Engine is actively exploited, granting unauthenticated attackers root command execution.
90
Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard
Cisco patches dozens of critical flaws in FMC, ISE and Nexus Dashboard, including ISE bugs and an authentication bypass already exploited in the wild.
80
Cisco warns of max severity ISE zero-day exploited in attacks
Cisco patched CVE-2026-76460, a maximum-severity authentication bypass in Identity Services Engine actively exploited in attacks; CISA added it to KEV with a three-day federal deadline.
84
Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks
Cisco confirmed active exploitation of CVE-2026-20079, a CVSS 10.0 authentication bypass enabling unauthenticated root command execution in Secure FMC; CISA added it to KEV.
85
Cisco Advance Notification for Publication of September 16, 2026, Security Advisories
Cisco will publish security advisories with fixed software on September 16, 2026, covering BroadWorks, ISE, Nexus Dashboard, ASA, FMC, FTD and ThousandEyes.
18
Cisco Advance Notification for Publication of September 2, 2026, Security Advisories
Cisco PSIRT published September 2, 2026 advisories including critical IOS XR hardening fixes and a Nexus 9000 remote code execution flaw.
25
Cisco Warns of Seven ClamAV Flaws, Two With Public PoCs
Cisco warns of seven ClamAV denial-of-service flaws in Secure Endpoint Connector, two with public PoCs; patches due in August.
45
Related CVEs
by mentions- CVE-2026-7646076%10.0Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC
- CVE-2026-2007988%10.0Authentication bypass to root access in Cisco Secure Firewall Management Center
- CVE-2026-7646130%9.8Unauthenticated SQL Injection to Root RCE in Cisco Secure Email Gateway
- CVE-2026-765192%9.8Relative Path Traversal to Root RCE in Cisco Secure Email Gateway
- CVE-2026-2031635%5.3Hard-Coded Password Vulnerability in Cisco Secure Firewall Management Center
- Authenticated SQL Injection in Cisco ISE SXP REST API
- CVE-2026-2018292%10.0Authentication Bypass in Cisco Catalyst SD-WAN Control Components
- CVE-2026-2024525%7.8Command Injection as Root in Cisco Catalyst SD-WAN Manager
- CVE-2026-20279<1%9.8Critical Improper Access Control in Cisco IOS XR Software
- Authenticated OS command injection (RCE) in Cisco ISE IPsec Open API
Appears with
- Ciscovendor · 14
- CISAorganization · 4
- Cisco Identity Services Engineproduct · 3
- Cisco Secure Email Gatewayproduct · 3
- Cisco Secure Firewall Management Centerproduct · 3
- Cisco Nexus Dashboardproduct · 2
- Cisco Secure Firewall Threat Defenseproduct · 2
- Cisco AsyncOSproduct · 2
- Nexus 9000product · 2
- Secure Email and Web Managerproduct · 1
- Secure Firewall Adaptive Security Applianceproduct · 1
- Nexus 3000product · 1
- Catalyst SD-WAN Managerproduct · 1
- IdentityAuditAction web shellmalware · 1
- IOS XRproduct · 1
- Finesse License On-Premproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.