CISA adds exploited GitLab and Cisco firewall flaws to KEV
Federal agencies must fix unauthenticated GitLab code execution and a Cisco firewall reload bug by November 1, 2026.
Stories per day · 30 days
2 RSS
Relatedcisco10denial-of-service9ftd9ssl-vpn7zero-day3kev2cisa1firewall1gitlab1keydrift1secure-ftd1vpn1
18 stories, newest first · one card per story
Stories tagged #asa
Cisco ASA and FTD SSL VPN flaw exploited to crash devices
CVE-2026-76418, scored 8.6, lets an unauthenticated attacker reload ASA or FTD when secondary authentication is configured; Cisco has fixes but no workaround.
Cisco says CVE-2026-76418 in Secure Firewall is exploited in the wild
ASA and FTD releases before the listed builds are affected by a remote SSL VPN tunnel denial of service.
Cisco ASA and FTD SSL VPN zero-day crashed firewalls in attacks
Unauthenticated attackers can reload devices that have webvpn and SSL VPN enabled; Cisco found exploitation in October 2026.
Cisco patches actively exploited ASA and FTD VPN crash flaw
CVE-2026-76418, scored 8.6, lets unauthenticated attackers reload firewalls when SSL VPN uses secondary authentication.
Cisco patches exploited ASA and FTD SSL VPN zero-day
CVE-2026-76418, CVSS 8.6, lets unauthenticated attackers restart firewalls when secondary authentication is configured.
Cisco patches exploited ASA and FTD SSL VPN flaw CVE-2026-76418
Unauthenticated crafted VPN requests can reload firewalls; CVSS is 8.6 and there is no workaround.
Cisco Secure Firewall VPN flaw CVE-2026-76418 exploited to crash devices
Unauthenticated crafted requests reload ASA and FTD devices when SSL VPN secondary authentication is configured; CVSS is 8.6.
CISA KEV lists Cisco firewall DoS flaw CVE-2026-76418
Unauthenticated remote attackers can reload ASA and Secure FTD devices; the federal due date is November 1, 2026.
Cisco ASA and FTD SSL VPN flaw can remotely reload devices
Unauthenticated attackers can crash devices when secondary authentication is set on a tunnel group; Cisco has shipped updates.
Cisco security advisory (AV26-932)
Cisco September 2026 updates fix flaws in ASA, FTD, FMC, ISE, and Nexus Dashboard; CISA added actively exploited CVE-2026-76460 to KEV.
Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026
Cisco's September 2026 firewall hardening release fixes internally found ASA, FTD, and FMC flaws, two of which are actively exploited.
2
Cisco security advisory (AV26-197) – Update 3
CISA added Cisco CVE-2026-20079 to its KEV catalog; the Canadian Cyber Centre urges updates across Secure Firewall ASA, FTD, FMC, and SCC products.
2
U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog.
CISA adds three actively exploited flaws—Cisco ASA/FTD DoS, Windows Winsock SYSTEM-level UAF, and Metabase SQL injection—to its Known Exploited Vulnerabilities catalog.
Cisco ASA and FTD DoS Vulnerability Exploited in the Wild (CVE-2026-20349)
Cisco patched actively exploited high-severity flaw CVE-2026-20349 in ASA and FTD SSL VPN services, allowing unauthenticated remote denial-of-service attacks.
Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)
Cisco patches CVE-2026-20349, a high-severity unauthenticated DoS in ASA and FTD VPN services now added to CISA's KEV.
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
Cisco warns actively exploited flaw CVE-2026-20349 lets unauthenticated attackers crash ASA and FTD firewalls via SSL VPN; CISA added it to KEV.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
Cisco patched an unauthenticated remote DoS in ASA and FTD Remote Access SSL VPN that reloads devices via crafted HTTP requests.