CISA adds exploited GitLab RCE and Cisco firewall DoS to KEV
Federal civilian agencies are told to apply fixes for both flaws by November 1, 2026.
82
Product
Secure Firewall Threat Defense
- Mentions · 7d7
- Mentions · 30d7
- All mentions9
- First seenSep 9, 2026
- Last mentioned2d ago
Timeline
9 articles · newest firstCisco ASA and FTD SSL VPN flaw exploited to crash devices
CVE-2026-76418, scored 8.6, lets an unauthenticated attacker reload ASA or FTD when secondary authentication is configured; Cisco has fixes but no workaround.
78
Cisco says CVE-2026-76418 in Secure Firewall is exploited in the wild
ASA and FTD releases before the listed builds are affected by a remote SSL VPN tunnel denial of service.
76
Cisco patches exploited ASA and FTD SSL VPN zero-day
CVE-2026-76418, CVSS 8.6, lets unauthenticated attackers restart firewalls when secondary authentication is configured.
76
Cisco patches exploited ASA and FTD SSL VPN flaw CVE-2026-76418
Unauthenticated crafted VPN requests can reload firewalls; CVSS is 8.6 and there is no workaround.
78
Cisco Secure Firewall VPN flaw CVE-2026-76418 exploited to crash devices
Unauthenticated crafted requests reload ASA and FTD devices when SSL VPN secondary authentication is configured; CVSS is 8.6.
78
Cisco ASA and FTD SSL VPN flaw can remotely reload devices
Unauthenticated attackers can crash devices when secondary authentication is set on a tunnel group; Cisco has shipped updates.
54
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability
Cisco expanded an SSL VPN denial-of-service advisory to cover all ASA and FTD software platforms; unauthenticated attackers can exhaust device memory.
45
Cisco security advisory (AV26-197) – Update 3
CISA added Cisco CVE-2026-20079 to its KEV catalog; the Canadian Cyber Centre urges updates across Secure Firewall ASA, FTD, FMC, and SCC products.
68
Related CVEs
by mentions- CVE-2026-76418<1%8.6Unauthenticated DoS in Cisco ASA and FTD SSL VPN with secondary auth
- CVE-2026-9722927%10.0Unauthenticated RCE in GitLab CE/EE via CI/CD regex
- CVE-2026-2007989%10.0Authentication bypass to root access in Cisco Secure Firewall Management Center
- CVE-2026-2013144%10.0Unauthenticated Java Deserialization RCE in Cisco FMC and SCC
Appears with
- Ciscovendor · 9
- Secure Firewall Adaptive Security Applianceproduct · 6
- CISAorganization · 2
- Security Cloud Controlproduct · 1
- Secure Firewall ASAproduct · 1
- Cisco Secure Firewall ASAproduct · 1
- GitLab Enterprise Editionproduct · 1
- Smart Software Manager On-Premproduct · 1
- Adaptive Security Applianceproduct · 1
- FTDvproduct · 1
- Secure Firewall Management Centerproduct · 1
- Canadian Centre for Cyber Securityorganization · 1
- Alpine Linuxvictim · 1
- GitLab Community Editionproduct · 1
- Cisco PSIRTorganization · 1
- ASAvproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.