Cisco patches actively exploited ASA and FTD VPN crash flaw
CVE-2026-76418, scored 8.6, lets unauthenticated attackers reload firewalls when SSL VPN uses secondary authentication.
10
Stories per day · 30 days
Relatedvolt-typhoon7cisco6sd-wan5authentication-bypass3critical-infrastructure2encryption-keys2silent-train2uat-114732zero-day2asa1catalyst-sd-wan1cisco-sd-wan1denial-of-service1ftd1vpn1
2 stories, newest first · one card per story
Stories tagged #keydrift
Volt Typhoon-linked actor exploited Cisco SD-WAN zero-day to steal encryption keys
CVE-2026-20127 (CVSS 10) gives unauthenticated admin access to SD-WAN controllers; KeyDrift malware siphoned keying material and Volt Typhoon kept exploiting the flaw after disclosure.
13