Cisco has released security updates to address CVE-2026-76418, a high-severity vulnerability in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software. The company reports the flaw is being exploited in the wild, with successful exploitation potentially causing the affected device to crash, resulting in a denial of service condition. The vulnerability has a CVSS score of 8.6.

Which products are affected?

Secure Firewall Adaptive Security Appliance (ASA) Software, Secure Firewall Threat Defense (FTD) Software

What should defenders do?

Cisco has released security updates to address CVE-2026-76418. Affected users should apply the patches immediately. Organizations should prioritize updating ASA and FTD Software to the latest patched versions to mitigate the risk of exploitation.

highCVE

Cisco Patches Actively Exploited VPN Flaw in ASA and FTD Software

CVE-2026-76418 allows unauthenticated remote attackers to cause denial of service on affected devices

Cyber.TechVoidPublished about 1 hour agoUpdated less than a minute ago1 min read

Cisco Patches Actively Exploited VPN Flaw in ASA and FTD Software

Key Takeaways

Cisco has patched CVE-2026-76418, a vulnerability in ASA and FTD Software with a CVSS score of 8.6.
The flaw is reported to be actively exploited in the wild.
Successful exploitation can cause an unauthenticated, remote attacker to crash affected devices, leading to denial of service.
Security updates have been released; immediate patching is recommended.

Related Security News

mediumCVE

Hitachi Energy REB500 Vulnerabilities: Two libexpat Flaws Patched in Version 8.3.4.0

Hitachi Energy has identified two open-source software vulnerabilities affecting the REB500 product line. CVE-2024-8176 is a stack overflow in the libexpat library arising from uncontrolled recursion, and CVE-2025-59375 allows authenticated users to trigger large dynamic memory allocations via crafted XML documents. Both vulnerabilities impact REB500 versions 8.3.3.1 and prior and can result in Denial of Service (DoS). Hitachi Energy has released version 8.3.4.0 containing fixes for both issues.

CISA Advisoriesabout 1 hour ago1 min read