{"history":[{"alert":0,"cve":"CVE-2026-76418","id":23501,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00821, \"percentile\": 0.57775}"},{"alert":0,"cve":"CVE-2026-76418","id":20826,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00821, \"percentile\": 0.57605}"},{"alert":0,"cve":"CVE-2026-76418","id":18834,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.00821, \"percentile\": 0.57555}"},{"alert":0,"cve":"CVE-2026-76418","id":16894,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.00821, \"percentile\": 0.57541}"},{"alert":0,"cve":"CVE-2026-76418","id":14872,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.00821, \"percentile\": 0.57523}"},{"alert":0,"cve":"CVE-2026-76418","id":12653,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.00821, \"percentile\": 0.57464}"},{"alert":0,"cve":"CVE-2026-76418","id":10635,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.00821, \"percentile\": 0.57433}"},{"alert":0,"cve":"CVE-2026-76418","id":8059,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.00821, \"percentile\": 0.57407}"},{"alert":0,"cve":"CVE-2026-76418","id":5844,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.00821, \"percentile\": 0.57342}"},{"alert":0,"cve":"CVE-2026-76418","id":3538,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.00821, \"percentile\": 0.57299}"},{"alert":1,"cve":"CVE-2026-76418","id":1778,"kind":"cna","observed_at":1793665375,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-76418\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-10-28T00:00:00+00:00\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2026-10-29\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-10-30T03:55:57.976Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-10-29T00:00:00.000Z\", \"value\": \"CVE-2026-76418 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"defaultStatus\": \"unknown\", \"product\": \"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\", \"vendor\": \"Cisco\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.16.1\"}, {\"status\": \"affected\", \"version\": \"9.16.1.28\"}, {\"status\": \"affected\", \"version\": \"9.16.2\"}, {\"status\": \"affected\", \"version\": \"9.16.2.3\"}, {\"status\": \"affected\", \"version\": \"9.16.2.7\"}, {\"status\": \"affected\", \"version\": \"9.16.2.11\"}, {\"status\": \"affected\", \"version\": \"9.16.2.13\"}, {\"status\": \"affected\", \"version\": \"9.16.2.14\"}, {\"status\": \"affected\", \"version\": \"9.16.3.3\"}, {\"status\": \"affected\", \"version\": \"9.16.3\"}, {\"status\": \"affected\", \"version\": \"9.16.3.14\"}, {\"status\": \"affected\", \"version\": \"9.18.1\"}, {\"status\": \"affected\", \"version\": \"9.16.3.15\"}, {\"status\": \"affected\", \"version\": \"9.18.1.3\"}, {\"status\": \"affected\", \"version\": \"9.18.2\"}, {\"status\": \"affected\", \"version\": \"9.16.3.19\"}, {\"status\": \"affected\", \"version\": \"9.16.3.23\"}, {\"status\": \"affected\", \"version\": \"9.18.2.5\"}, {\"status\": \"affected\", \"version\": \"9.16.4\"}, {\"status\": \"affected\", \"version\": \"9.18.2.7\"}, {\"status\": \"affected\", \"version\": \"9.19.1\"}, {\"status\": \"affected\", \"version\": \"9.16.4.9\"}, {\"status\": \"affected\", \"version\": \"9.18.2.8\"}, {\"status\": \"affected\", \"version\": \"9.16.4.14\"}, {\"status\": \"affected\", \"version\": \"9.18.3\"}, {\"status\": \"affected\", \"version\": \"9.19.1.5\"}, {\"status\": \"affected\", \"version\": \"9.16.4.18\"}, {\"status\": \"affected\", \"version\": \"9.19.1.9\"}, {\"status\": \"affected\", \"version\": \"9.18.3.39\"}, {\"status\": \"affected\", \"version\": \"9.16.4.19\"}, {\"status\": \"affected\", \"version\": \"9.19.1.12\"}, {\"status\": \"affected\", \"version\": \"9.18.3.46\"}, {\"status\": \"affected\", \"version\": \"9.16.4.27\"}, {\"status\": \"affected\", \"version\": \"9.19.1.18\"}, {\"status\": \"affected\", \"version\": \"9.18.3.53\"}, {\"status\": \"affected\", \"version\": \"9.18.3.55\"}, {\"status\": \"affected\", \"version\": \"9.16.4.38\"}, {\"status\": \"affected\", \"version\": \"9.16.4.39\"}, {\"status\": \"affected\", \"version\": \"9.18.3.56\"}, {\"status\": \"affected\", \"version\": \"9.20.1\"}, {\"status\": \"affected\", \"version\": \"9.16.4.42\"}, {\"status\": \"affected\", \"version\": \"9.19.1.22\"}, {\"status\": \"affected\", \"version\": \"9.18.4\"}, {\"status\": \"affected\", \"version\": \"9.20.1.5\"}, {\"status\": \"affected\", \"version\": \"9.18.4.5\"}, {\"status\": \"affected\", \"version\": \"9.19.1.24\"}, {\"status\": \"affected\", \"version\": \"9.16.4.48\"}, {\"status\": \"affected\", \"version\": \"9.18.4.8\"}, {\"status\": \"affected\", \"version\": \"9.20.2\"}, {\"status\": \"affected\", \"version\": \"9.19.1.27\"}, {\"status\": \"affected\", \"version\": \"9.16.4.55\"}, {\"status\": \"affected\", \"version\": \"9.18.4.22\"}, {\"status\": \"affected\", \"version\": \"9.20.2.10\"}, {\"status\": \"affected\", \"version\": \"9.16.4.57\"}, {\"status\": \"affected\", \"version\": \"9.19.1.28\"}, {\"status\": \"affected\", \"version\": \"9.18.4.24\"}, {\"status\": \"affected\", \"version\": \"9.20.2.21\"}, {\"status\": \"affected\", \"version\": \"9.16.4.61\"}, {\"status\": \"affected\", \"version\": \"9.19.1.31\"}, {\"status\": \"affected\", \"version\": \"9.18.4.29\"}, {\"status\": \"affected\", \"version\": \"9.20.2.22\"}, {\"status\": \"affected\", \"version\": \"9.16.4.62\"}, {\"status\": \"affected\", \"version\": \"9.18.4.34\"}, {\"status\": \"affected\", \"version\": \"9.20.3\"}, {\"status\": \"affected\", \"version\": \"9.16.4.67\"}, {\"status\": \"affected\", \"version\": \"9.16.4.70\"}, {\"status\": \"affected\", \"version\": \"9.18.4.40\"}, {\"status\": \"affected\", \"version\": \"9.23.1\"}, {\"status\": \"affected\", \"version\": \"9.22.1.1\"}, {\"status\": \"affected\", \"version\": \"9.16.4.71\"}, {\"status\": \"affected\", \"version\": \"9.20.3.4\"}, {\"status\": \"affected\", \"version\": \"9.18.4.47\"}, {\"status\": \"affected\", \"version\": \"9.20.3.7\"}, {\"status\": \"affected\", \"version\": \"9.19.1.37\"}, {\"status\": \"affected\", \"version\": \"9.16.4.76\"}, {\"status\": \"affected\", \"version\": \"9.20.3.9\"}, {\"status\": \"affected\", \"version\": \"9.19.1.38\"}, {\"status\": \"affected\", \"version\": \"9.18.4.50\"}, {\"status\": \"affected\", \"version\": \"9.22.1.3\"}, {\"status\": \"affected\", \"version\": \"9.20.3.10\"}, {\"status\": \"affected\", \"version\": \"9.22.1.2\"}, {\"status\": \"affected\", \"version\": \"9.18.4.52\"}, {\"status\": \"affected\", \"version\": \"9.20.3.13\"}, {\"status\": \"affected\", \"version\": \"9.22.1.6\"}, {\"status\": \"affected\", \"version\": \"9.18.4.53\"}, {\"status\": \"affected\", \"version\": \"9.16.4.82\"}, {\"status\": \"affected\", \"version\": \"9.22.2\"}, {\"status\": \"affected\", \"version\": \"9.20.3.16\"}, {\"status\": \"affected\", \"version\": \"9.19.1.42\"}, {\"status\": \"affected\", \"version\": \"9.18.4.57\"}, {\"status\": \"affected\", \"version\": \"9.16.4.84\"}, {\"status\": \"affected\", \"version\": \"9.23.1.3\"}, {\"status\": \"affected\", \"version\": \"9.20.3.20\"}, {\"status\": \"affected\", \"version\": \"9.22.2.4\"}, {\"status\": \"affected\", \"version\": \"9.23.1.7\"}, {\"status\": \"affected\", \"version\": \"9.20.4\"}, {\"status\": \"affected\", \"version\": \"9.22.2.9\"}, {\"status\": \"affected\", \"version\": \"9.23.1.13\"}, {\"status\": \"affected\", \"version\": \"9.20.4.7\"}, {\"status\": \"affected\", \"version\": \"9.22.2.13\"}, {\"status\": \"affected\", \"version\": \"9.18.4.66\"}, {\"status\": \"affected\", \"version\": \"9.20.4.10\"}, {\"status\": \"affected\", \"version\": \"9.23.1.19\"}, {\"status\": \"affected\", \"version\": \"9.16.4.85\"}, {\"status\": \"affected\", \"version\": \"9.22.2.14\"}, {\"status\": \"affected\", \"version\": \"9.18.4.67\"}, {\"status\": \"affected\", \"version\": \"9.24.1\"}, {\"status\": \"affected\", \"version\": \"9.18.4.68\"}, {\"status\": \"affected\", \"version\": \"9.23.1.22\"}, {\"status\": \"affected\", \"version\": \"9.20.4.14\"}, {\"status\": \"affected\", \"version\": \"9.22.2.20\"}, {\"status\": \"affected\", \"version\": \"9.18.4.71\"}, {\"status\": \"affected\", \"version\": \"9.20.4.19\"}, {\"status\": \"affected\", \"version\": \"9.23.1.26\"}, {\"status\": \"affected\", \"version\": \"9.16.4.89\"}, {\"status\": \"affected\", \"version\": \"9.22.2.32\"}, {\"status\": \"affected\", \"version\": \"9.18.4.76\"}, {\"status\": \"affected\", \"version\": \"9.22.3\"}, {\"status\": \"affected\", \"version\": \"9.24.1.5\"}, {\"status\": \"affected\", \"version\": \"9.20.4.22\"}, {\"status\": \"affected\", \"version\": \"9.24.1.9\"}, {\"status\": \"affected\", \"version\": \"9.20.4.28\"}, {\"status\": \"affected\", \"version\": \"9.22.3.5\"}, {\"status\": \"affected\", \"version\": \"9.16.4.92\"}, {\"status\": \"affected\", \"version\": \"9.18.4.135\"}, {\"status\": \"affected\", \"version\": \"9.23.1.195\"}, {\"status\": \"affected\", \"version\": \"9.20.4.30\"}, {\"status\": \"affected\", \"version\": \"9.24.1.155\"}, {\"status\": \"affected\", \"version\": \"9.23.1.32\"}, {\"status\": \"affected\", \"version\": \"9.24.1.11\"}, {\"status\": \"affected\", \"version\": \"9.20.4.34\"}, {\"status\": \"affected\", \"version\": \"9.18.4.82\"}, {\"status\": \"affected\", \"version\": \"9.24.10\"}, {\"status\": \"affected\", \"version\": \"9.18.4.90\"}, {\"status\": \"affected\", \"version\": \"9.20.4.46\"}, {\"status\": \"affected\", \"version\": \"9.20.4.235\"}, {\"status\": \"affected\", \"version\": \"9.20.4.49\"}, {\"status\": \"affected\", \"version\": \"9.22.3.26\"}, {\"status\": \"affected\", \"version\": \"9.16.4.103\"}, {\"status\": \"affected\", \"version\": \"9.18.4.94\"}, {\"status\": \"affected\", \"version\": \"9.23.1.47\"}, {\"status\": \"affected\", \"version\": \"9.24.1.26\"}]}, {\"defaultStatus\": \"unknown\", \"product\": \"Cisco Secure Firewall Threat Defense (FTD) Software\", \"vendor\": \"Cisco\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0.0\"}, {\"status\": \"affected\", \"version\": \"7.0.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.1.1\"}, {\"status\": \"affected\", \"version\": \"7.0.2\"}, {\"status\": \"affected\", \"version\": \"7.2.0\"}, {\"status\": \"affected\", \"version\": \"7.0.2.1\"}, {\"status\": \"affected\", \"version\": \"7.0.3\"}, {\"status\": \"affected\", \"version\": \"7.2.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.4\"}, {\"status\": \"affected\", \"version\": \"7.2.1\"}, {\"status\": \"affected\", \"version\": \"7.0.5\"}, {\"status\": \"affected\", \"version\": \"7.3.0\"}, {\"status\": \"affected\", \"version\": \"7.2.2\"}, {\"status\": \"affected\", \"version\": \"7.2.3\"}, {\"status\": \"affected\", \"version\": \"7.3.1\"}, {\"status\": \"affected\", \"version\": \"7.2.4\"}, {\"status\": \"affected\", \"version\": \"7.0.6\"}, {\"status\": \"affected\", \"version\": \"7.2.5\"}, {\"status\": \"affected\", \"version\": \"7.2.4.1\"}, {\"status\": \"affected\", \"version\": \"7.3.1.1\"}, {\"status\": \"affected\", \"version\": \"7.4.0\"}, {\"status\": \"affected\", \"version\": \"7.0.6.1\"}, {\"status\": \"affected\", \"version\": \"7.2.5.1\"}, {\"status\": \"affected\", \"version\": \"7.4.1\"}, {\"status\": \"affected\", \"version\": \"7.2.6\"}, {\"status\": \"affected\", \"version\": \"7.0.6.2\"}, {\"status\": \"affected\", \"version\": \"7.4.1.1\"}, {\"status\": \"affected\", \"version\": \"7.2.7\"}, {\"status\": \"affected\", \"version\": \"7.2.5.2\"}, {\"status\": \"affected\", \"version\": \"7.3.1.2\"}, {\"status\": \"affected\", \"version\": \"7.2.8\"}, {\"status\": \"affected\", \"version\": \"7.6.0\"}, {\"status\": \"affected\", \"version\": \"7.4.2\"}, {\"status\": \"affected\", \"version\": \"7.2.8.1\"}, {\"status\": \"affected\", \"version\": \"7.0.6.3\"}, {\"status\": \"affected\", \"version\": \"7.4.2.1\"}, {\"status\": \"affected\", \"version\": \"7.2.9\"}, {\"status\": \"affected\", \"version\": \"7.0.7\"}, {\"status\": \"affected\", \"version\": \"7.7.0\"}, {\"status\": \"affected\", \"version\": \"7.4.2.2\"}, {\"status\": \"affected\", \"version\": \"7.2.10\"}, {\"status\": \"affected\", \"version\": \"7.6.1\"}, {\"status\": \"affected\", \"version\": \"7.4.2.3\"}, {\"status\": \"affected\", \"version\": \"7.0.8\"}, {\"status\": \"affected\", \"version\": \"7.6.2\"}, {\"status\": \"affected\", \"version\": \"7.7.10\"}, {\"status\": \"affected\", \"version\": \"7.7.11\"}, {\"status\": \"affected\", \"version\": \"7.0.8.1\"}, {\"status\": \"affected\", \"version\": \"7.6.2.1\"}, {\"status\": \"affected\", \"version\": \"7.7.10.1\"}, {\"status\": \"affected\", \"version\": \"7.4.2.4\"}, {\"status\": \"affected\", \"version\": \"7.2.10.2\"}, {\"status\": \"affected\", \"version\": \"7.4.3\"}, {\"status\": \"affected\", \"version\": \"7.6.4\"}, {\"status\": \"affected\", \"version\": \"10.0.0\"}, {\"status\": \"affected\", \"version\": \"7.4.4\"}, {\"status\": \"affected\", \"version\": \"7.0.9\"}, {\"status\": \"affected\", \"version\": \"7.2.11\"}, {\"status\": \"affected\", \"version\": \"7.4.7\"}, {\"status\": \"affected\", \"version\": \"7.4.8\"}, {\"status\": \"affected\", \"version\": \"7.2.12\"}, {\"status\": \"affected\", \"version\": \"7.6.6\"}, {\"status\": \"affected\", \"version\": \"7.7.13\"}, {\"status\": \"affected\", \"version\": \"10.0.2\"}, {\"status\": \"affected\", \"version\": \"7.0.10\"}, {\"status\": \"affected\", \"version\": \"10.1.0\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 8.6, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"scope\": \"CHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\", \"version\": \"3.1\"}, \"format\": \"cvssV3_1\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-690\", \"description\": \"Unchecked Return Value to NULL Pointer Dereference\", \"lang\": \"en\", \"type\": \"cwe\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-10-28T20:05:31.926Z\", \"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\"}, \"references\": [{\"name\": \"cisco-sa-asaftd-tunnel-dos-s6mgkb75\", \"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75\"}], \"source\": {\"advisory\": \"cisco-sa-asaftd-tunnel-dos-s6mgkb75\", \"defects\": [\"CSCwx26625\"], \"discovery\": \"EXTERNAL\"}, \"title\": \"Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"assignerShortName\": \"cisco\", \"cveId\": \"CVE-2026-76418\", \"datePublished\": \"2026-10-28T20:05:31.926Z\", \"dateReserved\": \"2026-08-19T12:02:03.633Z\", \"dateUpdated\": \"2026-10-30T03:55:57.976Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":1,"cve":"CVE-2026-76418","id":4,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2026-76418\", \"cwes\": [\"CWE-690\"], \"dateAdded\": \"2026-10-29\", \"dueDate\": \"2026-11-01\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76418\", \"product\": \"Secure Firewall ASA Software and Cisco Secure FTD Software\", \"requiredAction\": \"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\\u2019s \\u201cForensics Triage Requirements\\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\", \"shortDescription\": \"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.\", \"vendorProject\": \"Cisco\", \"vulnerabilityName\": \"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unknown","product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","vendor":"Cisco","versions":[{"status":"affected","version":"9.16.1"},{"status":"affected","version":"9.16.1.28"},{"status":"affected","version":"9.16.2"},{"status":"affected","version":"9.16.2.3"},{"status":"affected","version":"9.16.2.7"},{"status":"affected","version":"9.16.2.11"},{"status":"affected","version":"9.16.2.13"},{"status":"affected","version":"9.16.2.14"},{"status":"affected","version":"9.16.3.3"},{"status":"affected","version":"9.16.3"},{"status":"affected","version":"9.16.3.14"},{"status":"affected","version":"9.18.1"},{"status":"affected","version":"9.16.3.15"},{"status":"affected","version":"9.18.1.3"},{"status":"affected","version":"9.18.2"},{"status":"affected","version":"9.16.3.19"},{"status":"affected","version":"9.16.3.23"},{"status":"affected","version":"9.18.2.5"},{"status":"affected","version":"9.16.4"},{"status":"affected","version":"9.18.2.7"},{"status":"affected","version":"9.19.1"},{"status":"affected","version":"9.16.4.9"},{"status":"affected","version":"9.18.2.8"},{"status":"affected","version":"9.16.4.14"},{"status":"affected","version":"9.18.3"},{"status":"affected","version":"9.19.1.5"},{"status":"affected","version":"9.16.4.18"},{"status":"affected","version":"9.19.1.9"},{"status":"affected","version":"9.18.3.39"},{"status":"affected","version":"9.16.4.19"},{"status":"affected","version":"9.19.1.12"},{"status":"affected","version":"9.18.3.46"},{"status":"affected","version":"9.16.4.27"},{"status":"affected","version":"9.19.1.18"},{"status":"affected","version":"9.18.3.53"},{"status":"affected","version":"9.18.3.55"},{"status":"affected","version":"9.16.4.38"},{"status":"affected","version":"9.16.4.39"},{"status":"affected","version":"9.18.3.56"},{"status":"affected","version":"9.20.1"},{"status":"affected","version":"9.16.4.42"},{"status":"affected","version":"9.19.1.22"},{"status":"affected","version":"9.18.4"},{"status":"affected","version":"9.20.1.5"},{"status":"affected","version":"9.18.4.5"},{"status":"affected","version":"9.19.1.24"},{"status":"affected","version":"9.16.4.48"},{"status":"affected","version":"9.18.4.8"},{"status":"affected","version":"9.20.2"},{"status":"affected","version":"9.19.1.27"},{"status":"affected","version":"9.16.4.55"},{"status":"affected","version":"9.18.4.22"},{"status":"affected","version":"9.20.2.10"},{"status":"affected","version":"9.16.4.57"},{"status":"affected","version":"9.19.1.28"},{"status":"affected","version":"9.18.4.24"},{"status":"affected","version":"9.20.2.21"},{"status":"affected","version":"9.16.4.61"},{"status":"affected","version":"9.19.1.31"},{"status":"affected","version":"9.18.4.29"},{"status":"affected","version":"9.20.2.22"},{"status":"affected","version":"9.16.4.62"},{"status":"affected","version":"9.18.4.34"},{"status":"affected","version":"9.20.3"},{"status":"affected","version":"9.16.4.67"},{"status":"affected","version":"9.16.4.70"},{"status":"affected","version":"9.18.4.40"},{"status":"affected","version":"9.23.1"},{"status":"affected","version":"9.22.1.1"},{"status":"affected","version":"9.16.4.71"},{"status":"affected","version":"9.20.3.4"},{"status":"affected","version":"9.18.4.47"},{"status":"affected","version":"9.20.3.7"},{"status":"affected","version":"9.19.1.37"},{"status":"affected","version":"9.16.4.76"},{"status":"affected","version":"9.20.3.9"},{"status":"affected","version":"9.19.1.38"},{"status":"affected","version":"9.18.4.50"},{"status":"affected","version":"9.22.1.3"},{"status":"affected","version":"9.20.3.10"},{"status":"affected","version":"9.22.1.2"},{"status":"affected","version":"9.18.4.52"},{"status":"affected","version":"9.20.3.13"},{"status":"affected","version":"9.22.1.6"},{"status":"affected","version":"9.18.4.53"},{"status":"affected","version":"9.16.4.82"},{"status":"affected","version":"9.22.2"},{"status":"affected","version":"9.20.3.16"},{"status":"affected","version":"9.19.1.42"},{"status":"affected","version":"9.18.4.57"},{"status":"affected","version":"9.16.4.84"},{"status":"affected","version":"9.23.1.3"},{"status":"affected","version":"9.20.3.20"},{"status":"affected","version":"9.22.2.4"},{"status":"affected","version":"9.23.1.7"},{"status":"affected","version":"9.20.4"},{"status":"affected","version":"9.22.2.9"},{"status":"affected","version":"9.23.1.13"},{"status":"affected","version":"9.20.4.7"},{"status":"affected","version":"9.22.2.13"},{"status":"affected","version":"9.18.4.66"},{"status":"affected","version":"9.20.4.10"},{"status":"affected","version":"9.23.1.19"},{"status":"affected","version":"9.16.4.85"},{"status":"affected","version":"9.22.2.14"},{"status":"affected","version":"9.18.4.67"},{"status":"affected","version":"9.24.1"},{"status":"affected","version":"9.18.4.68"},{"status":"affected","version":"9.23.1.22"},{"status":"affected","version":"9.20.4.14"},{"status":"affected","version":"9.22.2.20"},{"status":"affected","version":"9.18.4.71"},{"status":"affected","version":"9.20.4.19"},{"status":"affected","version":"9.23.1.26"},{"status":"affected","version":"9.16.4.89"},{"status":"affected","version":"9.22.2.32"},{"status":"affected","version":"9.18.4.76"},{"status":"affected","version":"9.22.3"},{"status":"affected","version":"9.24.1.5"},{"status":"affected","version":"9.20.4.22"},{"status":"affected","version":"9.24.1.9"},{"status":"affected","version":"9.20.4.28"},{"status":"affected","version":"9.22.3.5"},{"status":"affected","version":"9.16.4.92"},{"status":"affected","version":"9.18.4.135"},{"status":"affected","version":"9.23.1.195"},{"status":"affected","version":"9.20.4.30"},{"status":"affected","version":"9.24.1.155"},{"status":"affected","version":"9.23.1.32"},{"status":"affected","version":"9.24.1.11"},{"status":"affected","version":"9.20.4.34"},{"status":"affected","version":"9.18.4.82"},{"status":"affected","version":"9.24.10"},{"status":"affected","version":"9.18.4.90"},{"status":"affected","version":"9.20.4.46"},{"status":"affected","version":"9.20.4.235"},{"status":"affected","version":"9.20.4.49"},{"status":"affected","version":"9.22.3.26"},{"status":"affected","version":"9.16.4.103"},{"status":"affected","version":"9.18.4.94"},{"status":"affected","version":"9.23.1.47"},{"status":"affected","version":"9.24.1.26"}]},{"defaultStatus":"unknown","product":"Cisco Secure Firewall Threat Defense (FTD) Software","vendor":"Cisco","versions":[{"status":"affected","version":"7.0.0"},{"status":"affected","version":"7.0.0.1"},{"status":"affected","version":"7.0.1"},{"status":"affected","version":"7.0.1.1"},{"status":"affected","version":"7.0.2"},{"status":"affected","version":"7.2.0"},{"status":"affected","version":"7.0.2.1"},{"status":"affected","version":"7.0.3"},{"status":"affected","version":"7.2.0.1"},{"status":"affected","version":"7.0.4"},{"status":"affected","version":"7.2.1"},{"status":"affected","version":"7.0.5"},{"status":"affected","version":"7.3.0"},{"status":"affected","version":"7.2.2"},{"status":"affected","version":"7.2.3"},{"status":"affected","version":"7.3.1"},{"status":"affected","version":"7.2.4"},{"status":"affected","version":"7.0.6"},{"status":"affected","version":"7.2.5"},{"status":"affected","version":"7.2.4.1"},{"status":"affected","version":"7.3.1.1"},{"status":"affected","version":"7.4.0"},{"status":"affected","version":"7.0.6.1"},{"status":"affected","version":"7.2.5.1"},{"status":"affected","version":"7.4.1"},{"status":"affected","version":"7.2.6"},{"status":"affected","version":"7.0.6.2"},{"status":"affected","version":"7.4.1.1"},{"status":"affected","version":"7.2.7"},{"status":"affected","version":"7.2.5.2"},{"status":"affected","version":"7.3.1.2"},{"status":"affected","version":"7.2.8"},{"status":"affected","version":"7.6.0"},{"status":"affected","version":"7.4.2"},{"status":"affected","version":"7.2.8.1"},{"status":"affected","version":"7.0.6.3"},{"status":"affected","version":"7.4.2.1"},{"status":"affected","version":"7.2.9"},{"status":"affected","version":"7.0.7"},{"status":"affected","version":"7.7.0"},{"status":"affected","version":"7.4.2.2"},{"status":"affected","version":"7.2.10"},{"status":"affected","version":"7.6.1"},{"status":"affected","version":"7.4.2.3"},{"status":"affected","version":"7.0.8"},{"status":"affected","version":"7.6.2"},{"status":"affected","version":"7.7.10"},{"status":"affected","version":"7.7.11"},{"status":"affected","version":"7.0.8.1"},{"status":"affected","version":"7.6.2.1"},{"status":"affected","version":"7.7.10.1"},{"status":"affected","version":"7.4.2.4"},{"status":"affected","version":"7.2.10.2"},{"status":"affected","version":"7.4.3"},{"status":"affected","version":"7.6.4"},{"status":"affected","version":"10.0.0"},{"status":"affected","version":"7.4.4"},{"status":"affected","version":"7.0.9"},{"status":"affected","version":"7.2.11"},{"status":"affected","version":"7.4.7"},{"status":"affected","version":"7.4.8"},{"status":"affected","version":"7.2.12"},{"status":"affected","version":"7.6.6"},{"status":"affected","version":"7.7.13"},{"status":"affected","version":"10.0.2"},{"status":"affected","version":"7.0.10"},{"status":"affected","version":"10.1.0"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-76418","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-28T00:00:00+00:00","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2026-10-29","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2026-10-30T03:55:57.976Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418"}],"timeline":[{"lang":"en","time":"2026-10-29T00:00:00.000Z","value":"CVE-2026-76418 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unknown","product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","vendor":"Cisco","versions":[{"status":"affected","version":"9.16.1"},{"status":"affected","version":"9.16.1.28"},{"status":"affected","version":"9.16.2"},{"status":"affected","version":"9.16.2.3"},{"status":"affected","version":"9.16.2.7"},{"status":"affected","version":"9.16.2.11"},{"status":"affected","version":"9.16.2.13"},{"status":"affected","version":"9.16.2.14"},{"status":"affected","version":"9.16.3.3"},{"status":"affected","version":"9.16.3"},{"status":"affected","version":"9.16.3.14"},{"status":"affected","version":"9.18.1"},{"status":"affected","version":"9.16.3.15"},{"status":"affected","version":"9.18.1.3"},{"status":"affected","version":"9.18.2"},{"status":"affected","version":"9.16.3.19"},{"status":"affected","version":"9.16.3.23"},{"status":"affected","version":"9.18.2.5"},{"status":"affected","version":"9.16.4"},{"status":"affected","version":"9.18.2.7"},{"status":"affected","version":"9.19.1"},{"status":"affected","version":"9.16.4.9"},{"status":"affected","version":"9.18.2.8"},{"status":"affected","version":"9.16.4.14"},{"status":"affected","version":"9.18.3"},{"status":"affected","version":"9.19.1.5"},{"status":"affected","version":"9.16.4.18"},{"status":"affected","version":"9.19.1.9"},{"status":"affected","version":"9.18.3.39"},{"status":"affected","version":"9.16.4.19"},{"status":"affected","version":"9.19.1.12"},{"status":"affected","version":"9.18.3.46"},{"status":"affected","version":"9.16.4.27"},{"status":"affected","version":"9.19.1.18"},{"status":"affected","version":"9.18.3.53"},{"status":"affected","version":"9.18.3.55"},{"status":"affected","version":"9.16.4.38"},{"status":"affected","version":"9.16.4.39"},{"status":"affected","version":"9.18.3.56"},{"status":"affected","version":"9.20.1"},{"status":"affected","version":"9.16.4.42"},{"status":"affected","version":"9.19.1.22"},{"status":"affected","version":"9.18.4"},{"status":"affected","version":"9.20.1.5"},{"status":"affected","version":"9.18.4.5"},{"status":"affected","version":"9.19.1.24"},{"status":"affected","version":"9.16.4.48"},{"status":"affected","version":"9.18.4.8"},{"status":"affected","version":"9.20.2"},{"status":"affected","version":"9.19.1.27"},{"status":"affected","version":"9.16.4.55"},{"status":"affected","version":"9.18.4.22"},{"status":"affected","version":"9.20.2.10"},{"status":"affected","version":"9.16.4.57"},{"status":"affected","version":"9.19.1.28"},{"status":"affected","version":"9.18.4.24"},{"status":"affected","version":"9.20.2.21"},{"status":"affected","version":"9.16.4.61"},{"status":"affected","version":"9.19.1.31"},{"status":"affected","version":"9.18.4.29"},{"status":"affected","version":"9.20.2.22"},{"status":"affected","version":"9.16.4.62"},{"status":"affected","version":"9.18.4.34"},{"status":"affected","version":"9.20.3"},{"status":"affected","version":"9.16.4.67"},{"status":"affected","version":"9.16.4.70"},{"status":"affected","version":"9.18.4.40"},{"status":"affected","version":"9.23.1"},{"status":"affected","version":"9.22.1.1"},{"status":"affected","version":"9.16.4.71"},{"status":"affected","version":"9.20.3.4"},{"status":"affected","version":"9.18.4.47"},{"status":"affected","version":"9.20.3.7"},{"status":"affected","version":"9.19.1.37"},{"status":"affected","version":"9.16.4.76"},{"status":"affected","version":"9.20.3.9"},{"status":"affected","version":"9.19.1.38"},{"status":"affected","version":"9.18.4.50"},{"status":"affected","version":"9.22.1.3"},{"status":"affected","version":"9.20.3.10"},{"status":"affected","version":"9.22.1.2"},{"status":"affected","version":"9.18.4.52"},{"status":"affected","version":"9.20.3.13"},{"status":"affected","version":"9.22.1.6"},{"status":"affected","version":"9.18.4.53"},{"status":"affected","version":"9.16.4.82"},{"status":"affected","version":"9.22.2"},{"status":"affected","version":"9.20.3.16"},{"status":"affected","version":"9.19.1.42"},{"status":"affected","version":"9.18.4.57"},{"status":"affected","version":"9.16.4.84"},{"status":"affected","version":"9.23.1.3"},{"status":"affected","version":"9.20.3.20"},{"status":"affected","version":"9.22.2.4"},{"status":"affected","version":"9.23.1.7"},{"status":"affected","version":"9.20.4"},{"status":"affected","version":"9.22.2.9"},{"status":"affected","version":"9.23.1.13"},{"status":"affected","version":"9.20.4.7"},{"status":"affected","version":"9.22.2.13"},{"status":"affected","version":"9.18.4.66"},{"status":"affected","version":"9.20.4.10"},{"status":"affected","version":"9.23.1.19"},{"status":"affected","version":"9.16.4.85"},{"status":"affected","version":"9.22.2.14"},{"status":"affected","version":"9.18.4.67"},{"status":"affected","version":"9.24.1"},{"status":"affected","version":"9.18.4.68"},{"status":"affected","version":"9.23.1.22"},{"status":"affected","version":"9.20.4.14"},{"status":"affected","version":"9.22.2.20"},{"status":"affected","version":"9.18.4.71"},{"status":"affected","version":"9.20.4.19"},{"status":"affected","version":"9.23.1.26"},{"status":"affected","version":"9.16.4.89"},{"status":"affected","version":"9.22.2.32"},{"status":"affected","version":"9.18.4.76"},{"status":"affected","version":"9.22.3"},{"status":"affected","version":"9.24.1.5"},{"status":"affected","version":"9.20.4.22"},{"status":"affected","version":"9.24.1.9"},{"status":"affected","version":"9.20.4.28"},{"status":"affected","version":"9.22.3.5"},{"status":"affected","version":"9.16.4.92"},{"status":"affected","version":"9.18.4.135"},{"status":"affected","version":"9.23.1.195"},{"status":"affected","version":"9.20.4.30"},{"status":"affected","version":"9.24.1.155"},{"status":"affected","version":"9.23.1.32"},{"status":"affected","version":"9.24.1.11"},{"status":"affected","version":"9.20.4.34"},{"status":"affected","version":"9.18.4.82"},{"status":"affected","version":"9.24.10"},{"status":"affected","version":"9.18.4.90"},{"status":"affected","version":"9.20.4.46"},{"status":"affected","version":"9.20.4.235"},{"status":"affected","version":"9.20.4.49"},{"status":"affected","version":"9.22.3.26"},{"status":"affected","version":"9.16.4.103"},{"status":"affected","version":"9.18.4.94"},{"status":"affected","version":"9.23.1.47"},{"status":"affected","version":"9.24.1.26"}]},{"defaultStatus":"unknown","product":"Cisco Secure Firewall Threat Defense (FTD) Software","vendor":"Cisco","versions":[{"status":"affected","version":"7.0.0"},{"status":"affected","version":"7.0.0.1"},{"status":"affected","version":"7.0.1"},{"status":"affected","version":"7.0.1.1"},{"status":"affected","version":"7.0.2"},{"status":"affected","version":"7.2.0"},{"status":"affected","version":"7.0.2.1"},{"status":"affected","version":"7.0.3"},{"status":"affected","version":"7.2.0.1"},{"status":"affected","version":"7.0.4"},{"status":"affected","version":"7.2.1"},{"status":"affected","version":"7.0.5"},{"status":"affected","version":"7.3.0"},{"status":"affected","version":"7.2.2"},{"status":"affected","version":"7.2.3"},{"status":"affected","version":"7.3.1"},{"status":"affected","version":"7.2.4"},{"status":"affected","version":"7.0.6"},{"status":"affected","version":"7.2.5"},{"status":"affected","version":"7.2.4.1"},{"status":"affected","version":"7.3.1.1"},{"status":"affected","version":"7.4.0"},{"status":"affected","version":"7.0.6.1"},{"status":"affected","version":"7.2.5.1"},{"status":"affected","version":"7.4.1"},{"status":"affected","version":"7.2.6"},{"status":"affected","version":"7.0.6.2"},{"status":"affected","version":"7.4.1.1"},{"status":"affected","version":"7.2.7"},{"status":"affected","version":"7.2.5.2"},{"status":"affected","version":"7.3.1.2"},{"status":"affected","version":"7.2.8"},{"status":"affected","version":"7.6.0"},{"status":"affected","version":"7.4.2"},{"status":"affected","version":"7.2.8.1"},{"status":"affected","version":"7.0.6.3"},{"status":"affected","version":"7.4.2.1"},{"status":"affected","version":"7.2.9"},{"status":"affected","version":"7.0.7"},{"status":"affected","version":"7.7.0"},{"status":"affected","version":"7.4.2.2"},{"status":"affected","version":"7.2.10"},{"status":"affected","version":"7.6.1"},{"status":"affected","version":"7.4.2.3"},{"status":"affected","version":"7.0.8"},{"status":"affected","version":"7.6.2"},{"status":"affected","version":"7.7.10"},{"status":"affected","version":"7.7.11"},{"status":"affected","version":"7.0.8.1"},{"status":"affected","version":"7.6.2.1"},{"status":"affected","version":"7.7.10.1"},{"status":"affected","version":"7.4.2.4"},{"status":"affected","version":"7.2.10.2"},{"status":"affected","version":"7.4.3"},{"status":"affected","version":"7.6.4"},{"status":"affected","version":"10.0.0"},{"status":"affected","version":"7.4.4"},{"status":"affected","version":"7.0.9"},{"status":"affected","version":"7.2.11"},{"status":"affected","version":"7.4.7"},{"status":"affected","version":"7.4.8"},{"status":"affected","version":"7.2.12"},{"status":"affected","version":"7.6.6"},{"status":"affected","version":"7.7.13"},{"status":"affected","version":"10.0.2"},{"status":"affected","version":"7.0.10"},{"status":"affected","version":"10.1.0"}]}],"descriptions":[{"lang":"en","value":"A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."}],"exploits":[{"lang":"en","value":"In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","version":"3.1"},"format":"cvssV3_1"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-690","description":"Unchecked Return Value to NULL Pointer Dereference","lang":"en","type":"cwe"}]}],"providerMetadata":{"dateUpdated":"2026-10-28T20:05:31.926Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"cisco-sa-asaftd-tunnel-dos-s6mgkb75","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75"}],"source":{"advisory":"cisco-sa-asaftd-tunnel-dos-s6mgkb75","defects":["CSCwx26625"],"discovery":"EXTERNAL"},"title":"Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability"}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2026-76418","datePublished":"2026-10-28T20:05:31.926Z","dateReserved":"2026-08-19T12:02:03.633Z","dateUpdated":"2026-10-30T03:55:57.976Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794522003,"cve":"CVE-2026-76418","description":"A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.","epss":{"date":"2026-11-12","epss":0.00821,"percentile":0.57775},"epss_checked":1794522003,"first_seen":1793665374,"kev":{"cveID":"CVE-2026-76418","cwes":["CWE-690"],"dateAdded":"2026-10-29","dueDate":"2026-11-01","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76418","product":"Secure Firewall ASA Software and Cisco Secure FTD Software","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","shortDescription":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.","vendorProject":"Cisco","vulnerabilityName":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability"},"kev_checked":1794522003,"products":"Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Cisco Secure Firewall Threat Defense (FTD) Software","references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","provider":"cisco","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418","id":4,"publisher":"CISA KEV","title":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability"}]}