CVE-2026-76418 — No account needed: hackers are knocking out Cisco firewall VPNs by forcing them to reboot

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

No account needed: hackers are knocking out Cisco firewall VPNs by forcing them to reboot

On October 28, Cisco patched CVE-2026-76418, already exploited against ASA and FTD firewalls whose VPN uses dual authentication. Here are the versions to install and the workaround if the update has to wait.

Oct 29, 20262 min readAutomated publication

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)