Cisco released patches for CVE-2026-76418 (CVSS 8.6), a flaw in the Remote Access SSL VPN service of Secure Firewall ASA and FTD software that has been exploited in the wild, and CISA added it to the Known Exploited Vulnerabilities catalogue on 29 October. The vulnerability stems from logic errors when secondary authentication is configured on a tunnel group: an unauthenticated, remote attacker can send a crafted request while connecting to the SSL remote-access VPN and cause the affected device to reload, producing a denial of service on the very appliance protecting the network edge. Cisco's Wednesday advisory confirms active exploitation but provides no attribution, victim counts or observed volume. Given ASA/FTD devices sit at the perimeter of most organisations, the KEV addition means US federal agencies face a mandated mitigation deadline, and all operators should apply the fixed releases promptly.

• Source article