UpHeron
All vulnerabilities

Servers and applications

CVE-2026-76418

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is…

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 29 Oct 2026.

Severity
High 8.6
Published
28 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.48, 9.24.1.27
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • Version 9.24.10
  • From 9.24.1 before 9.24.1.27
  • From 9.23 before 9.23.1.48
  • From 9.22 before 9.22.3.200
All 7 release lines
  • Every version before 9.16.4.104
  • From 9.18 before 9.18.4.96
  • From 9.19 before 9.20.4.50
  • From 9.22 before 9.22.3.200
  • From 9.23 before 9.23.1.48
  • From 9.24.1 before 9.24.1.27
  • Version 9.24.10

Known exploited

CISA name
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or…
Due for US agencies
1 Nov 2026
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-76418
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-76418