Mmastodon Technology Cybersecurity first seen 6 d ago, last 6 d ago, peak #9

Cisco patches actively exploited ASA/FTD SSL VPN flaw

Original: Cisco patched CVE-2026-76418, an ASA/FTD SSL VPN bug already exploited in the wild. No login needed: one crafted request

Cisco has released fixes for CVE-2026-76418, a vulnerability in the SSL VPN feature of its ASA and FTD firewalls that is already being exploited in the wild. The flaw requires no authentication: a single crafted request can force the device to reload, but only configurations using secondary authentication on a tunnel group are affected. Administrators are urged to upgrade, or as a stopgap disable secondary authentication.

Why now: Security teams are rushing to patch a remotely exploitable, unauthenticated denial-of-service bug already seen in live attacks.

Cisco CVE-2026-76418 Cisco ASA Cisco FTD SSL VPN

Open on mastodon →

Evidence

Cisco patched CVE-2026-76418, an ASA/FTD SSL VPN bug already exploited in the wild. No login needed: one crafted request makes the firewall reload. Only setups with secondary auth on a tunnel group are hit. Upgrade, or turn off secondary auth for now. # Cisco # VPN # InfoSec · burso

API: https://socialmediatrends-api.osmike.com/v1/trends/4135451