New Cisco firewall zero-day exploited to crash SSL VPN devices
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Cisco has released patches for CVE-2026-76418, a high-severity denial-of-service zero-day in ASA and FTD firewall software that attackers are already exploiting to remotely crash SSL VPN-enabled devices without authentication.