Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

CISA KEV lists Cisco firewall DoS flaw CVE-2026-76418

Original title: CISA KEV: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418)

CISA Known Exploited Vulnerabilities ()1 min read1
Read at cisa.gov
Part of a story covered by 10 sourcesCisco patches exploited ASA and FTD SSL VPN crash flawMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Unauthenticated remote attackers can reload ASA and Secure FTD devices; the federal due date is November 1, 2026.

CISA added CVE-2026-76418, an unchecked return value leading to a NULL pointer dereference in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software, to the Known Exploited Vulnerabilities catalog. An unauthenticated remote attacker could force an unexpected reload and a denial of service. Agencies must apply vendor mitigations under BOD 26-04 by November 1, 2026, or stop using the product if mitigations are unavailable. Known ransomware use is listed as unknown.

Unconfirmed: CISA lists known ransomware campaign use as unknown and states no affected versions.

Key facts
  • Catalog due date is November 1, 2026.
  • Known ransomware campaign use is unknown.
  • CISA also points stakeholders to its forensics triage requirements.
  • No affected or fixed version strings are stated.
Security assessment · AI, from the articleExploited in the wild

Impact: Unauthenticated remote denial of service by device reload

ProductAffected
Cisco Secure Firewall ASA Software—
Cisco Secure FTD Software—
What to do
  1. 1.Apply vendor mitigations and follow CISA BOD 26-04 by November 1, 2026.
  2. 2.Discontinue use if mitigations are unavailable.
  3. 3.Evaluate each asset's internet exposure and follow CISA forensics triage requirements.
Analyze CVE-2026-76418 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-76418
ATT&CK
T1190 Exploit Public-Facing ApplicationT1499 Endpoint Denial of Service
Tags
ciscoasasecure-ftdkevdenial-of-service
Vendors
Cisco
Products
Cisco Secure Firewall ASA SoftwareCisco Secure FTD Software
Organizations
CISA

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-76418
Unauthenticated DoS in Cisco ASA and FTD SSL VPN with secondary auth
8.6<1%KEV
KEV

From the original article

1 min read at cisa.gov

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.

CISA Known Exploited Vulnerabilities

cisa.gov

Read the full article at CISA Known Exploited Vulnerabilities

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.