Cisco says CVE-2026-76418 in Secure Firewall is exploited in the wild
Original title: Cisco security advisory (AV26-1102)
ASA and FTD releases before the listed builds are affected by a remote SSL VPN tunnel denial of service.
Canada’s Cyber Centre relayed Cisco advisory AV26-1102 on October 29, 2026. As of October 28, Cisco says CVE-2026-76418 is exploited in the wild. Affected products include Secure Firewall ASA and Threat Defense before listed releases, described as a remote access SSL VPN tunnel denial-of-service flaw, plus Smart Software Manager On-Prem before 10-202610. The notice also points to October 2026 Node.js vulnerabilities affecting Cisco products. Administrators are told to review Cisco’s links and apply updates.
Unconfirmed: The notice does not say whether Smart Software Manager On-Prem is affected by CVE-2026-76418 or a separate issue.
- ASA is affected before 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.4, 9.24.1.27 and 9.24.10.1.
- FTD is affected before 7.0.11, 7.2.13, 7.4.9, 7.6.7, 7.7.14, 10.0.3 and 10.1.1.
- Smart Software Manager On-Prem is affected before 10-202610.
- The Cyber Centre says Cisco reports in-the-wild exploitation of CVE-2026-76418.
Impact: Remote denial of service of SSL VPN tunnels
| Product | Affected | Fixed in |
|---|---|---|
| Cisco Secure Firewall Adaptive Security Appliance | prior to 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.4, 9.24.1.27 and 9.24.10.1 | 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.4, 9.24.1.27, 9.24.10.1 |
| Cisco Secure Firewall Threat Defense | prior to 7.0.11, 7.2.13, 7.4.9, 7.6.7, 7.7.14, 10.0.3 and 10.1.1 | 7.0.11, 7.2.13, 7.4.9, 7.6.7, 7.7.14, 10.0.3, 10.1.1 |
| Cisco Smart Software Manager On-Prem | prior to 10-202610 | 10-202610 |
- 1.Apply the listed ASA, FTD and Smart Software Manager On-Prem updates.
- 2.Review Cisco’s linked advisories, including the October 2026 Node.js notice.
- CVEs
- CVE-2026-76418
- Vendors
- Cisco
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-76418 | Unauthenticated DoS in Cisco ASA and FTD SSL VPN with secondary auth | 8.6 | <1% | KEV | KEV |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1102 Date: October 29, 2026 As of October 28, 2026, Cisco is affected by a vulnerability in the following products: Cisco Secure Firewall Adaptive Security Appliance (ASA) Versions prior to 9. 16. 4.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.