CISA adds exploited GitLab RCE and Cisco firewall DoS to KEV
Federal civilian agencies are told to apply fixes for both flaws by November 1, 2026.
82
Product
Secure Firewall Adaptive Security Appliance
- Mentions · 7d6
- Mentions · 30d6
- All mentions6
- First seenOct 28, 2026
- Last mentioned15h ago
Timeline
6 articles · newest firstCisco ASA and FTD SSL VPN flaw exploited to crash devices
CVE-2026-76418, scored 8.6, lets an unauthenticated attacker reload ASA or FTD when secondary authentication is configured; Cisco has fixes but no workaround.
78
Cisco says CVE-2026-76418 in Secure Firewall is exploited in the wild
ASA and FTD releases before the listed builds are affected by a remote SSL VPN tunnel denial of service.
76
Cisco patches exploited ASA and FTD SSL VPN zero-day
CVE-2026-76418, CVSS 8.6, lets unauthenticated attackers restart firewalls when secondary authentication is configured.
76
Cisco patches exploited ASA and FTD SSL VPN flaw CVE-2026-76418
Unauthenticated crafted VPN requests can reload firewalls; CVSS is 8.6 and there is no workaround.
78
Cisco ASA and FTD SSL VPN flaw can remotely reload devices
Unauthenticated attackers can crash devices when secondary authentication is set on a tunnel group; Cisco has shipped updates.
54
Related CVEs
by mentions- CVE-2026-76418<1%8.6Unauthenticated DoS in Cisco ASA and FTD SSL VPN with secondary auth
- CVE-2026-9722918%10.0Unauthenticated RCE in GitLab CE/EE via CI/CD regex
Appears with
- Secure Firewall Threat Defenseproduct · 6
- Ciscovendor · 6
- Alpine Linuxvictim · 1
- GitLab Enterprise Editionproduct · 1
- CISAorganization · 1
- Cisco PSIRTorganization · 1
- GitLab Community Editionproduct · 1
- Smart Software Manager On-Premproduct · 1
- GitLabvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.