search
SSL VPN
Trends
- 1Cisco Patches Actively Exploited Firewall Zero-Day▼Cisco Patches Actively Exploited Firewall Zero-Day Cisco patched a high-severity zero-day vulnerability (CVE-2026-76418)
Cisco has released patches for a high-severity zero-day vulnerability, tracked as CVE-2026-76418, in its ASA and FTD firewall software. The flaw lets unauthenticated attackers remotely crash devices running SSL VPN, and it has reportedly been used as part of targeted attacks against firewalls. Security teams are urged to apply the fixes promptly.
- 2Cisco patches actively exploited ASA/FTD SSL VPN flaw●Cisco patched CVE-2026-76418, an ASA/FTD SSL VPN bug already exploited in the wild. No login needed: one crafted request
Cisco has released fixes for CVE-2026-76418, a vulnerability in the SSL VPN feature of its ASA and FTD firewalls that is already being exploited in the wild. The flaw requires no authentication: a single crafted request can force the device to reload, but only configurations using secondary authentication on a tunnel group are affected. Administrators are urged to upgrade, or as a stopgap disable secondary authentication.