Vulnerability intelligence

CVE-2026-76418: Cisco ASA and FTD SSL VPN denial of service

Cisco's October 28, 2026 advisory describes a high-severity SSL VPN denial-of-service issue affecting certain ASA and FTD releases with secondary authentication enabled.

IRIROSG Editorial·2026-10-28·1 min read·73 body words

CVE-2026-76418: Cisco ASA and FTD SSL VPN denial of service

IdentifierCVE-2026-76418

Vendor / productCisco / Cisco ASA and FTD SSL VPN

Severity scoreCVSS 8.6

Added to CISA KEV2026-10-29

A KEV listing indicates evidence of real-world exploitation—not that every installation is compromised. Check your version, configuration and the vendor’s advisory.

CVE-2026-76418 is an unauthenticated remote denial-of-service vulnerability in Cisco ASA and FTD Remote Access SSL VPN deployments under specific secondary-authentication configurations. Cisco rates it High with CVSS 3.1 score 8.6 and confirms exploitation in the wild. The advisory covers affected configurations, fixed software branches and operational risk of temporary mitigations. Administrators should consult Cisco PSIRT and CISA to prioritize supported fixes.

This is an English overview. The complete original article is currently published in Persian.

TRACEABLE KNOWLEDGE

Sources & further reading

Cisco PSIRT official advisory, October 28 2026https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75

NIST NVD — CVE-2026-76418https://nvd.nist.gov/vuln/detail/CVE-2026-76418

CISA Known Exploited Vulnerabilities cataloghttps://www.cisa.gov/known-exploited-vulnerabilities-catalog

IROSG / EDITORIAL

News and pioneer profiles use original writing with source attribution. Image credits and licenses are kept in each page’s sources section instead of beneath the images. CVE reference data credits its primary sources.

Editorial and image policy ↗