Exploited Cisco ASA and FTD SSL VPN Flaw Enables Remote Device Restarts

Cisco has released security updates for CVE-2026-76418, a reportedly actively exploited denial-of-service vulnerability affecting Secure Firewall ASA and FTD software. Reports citing Cisco’s October 28 advisory assign the flaw a CVSS score of 8.6. An unauthenticated remote attacker can send crafted requests to an exposed SSL remote-access VPN service configured with secondary authentication, causing appliance restarts. Repeated exploitation could sustain an outage and disrupt remote connectivity. Cisco reportedly identified no attackers or victims and reported no confirmed data theft or remote code execution.

Organizations running affected VPN configurations should prioritize installing the appropriate Cisco-fixed release and monitor for unexpected appliance reloads and lina process crashes. Cisco reportedly lists no workaround; suggestions to disable secondary authentication are configuration-dependent and could weaken VPN security, so they should not be treated as an equivalent substitute for patching. Administrators should verify affected and fixed versions against Cisco’s official advisory, as the accompanying technical blog’s release details and implementation claims have not been independently verified.