As cited
Copy frozen at (site build).
vulnerabilities
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
Cisco released patches October 29, 2026 for CVE-2026-76418, a critical vulnerability in Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) affecting the Remote Access SSL virtual private network (VPN) service. Attackers can exploit the flaw remotely without authentication. This represents the second exploited zero-day in Cisco firewall VPN functionality since August.
Why it matters: Organizations running Cisco ASA or FTD must apply patches immediately, as attackers actively exploit this vulnerability to gain unauthorized remote access to protected networks.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
Cisco released patches October 29, 2026 for CVE-2026-76418, a critical vulnerability in Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) affecting the Remote Access SSL virtual private network (VPN) service. Attackers can exploit the flaw remotely without authentication. This represents the second exploited zero-day in Cisco firewall VPN functionality since August.
Why it matters: Organizations running Cisco ASA or FTD must apply patches immediately, as attackers actively exploit this vulnerability to gain unauthorized remote access to protected networks.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
Cisco released patches for CVE-2026-76418, a critical vulnerability in its Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense products affecting the remote access virtual private network (VPN) service. The flaw, rated 8.6 CVSS, allows unauthenticated remote attackers to compromise affected devices and marks the second exploited zero-day in Cisco's firewall VPN functionality since August.
Why it matters: Organizations running Cisco Secure Firewall ASA or FTD devices must patch immediately, as this vulnerability is actively exploited in the wild and requires no authentication or user interaction to trigger remote code execution (RCE).
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
Cisco released patches for CVE-2026-76418, a critical vulnerability in its Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense products affecting the remote access virtual private network (VPN) service. The flaw, rated 8.6 CVSS, allows unauthenticated remote attackers to compromise affected devices and marks the second exploited zero-day in Cisco's firewall VPN functionality since August.
Why it matters: Organizations running Cisco Secure Firewall ASA or FTD devices must patch immediately, as this vulnerability is actively exploited in the wild and requires no authentication or user interaction to trigger remote code execution (RCE).
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
Cisco released patches on October 29, 2026 for CVE-2026-76418, an actively exploited vulnerability in Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. The flaw resides in the Remote Access virtual private network (VPN) service and allows unauthenticated remote attackers to trigger unspecified impact on affected devices. This marks the second Cisco firewall VPN zero-day exploited since August.
Why it matters: Organizations running Cisco ASA or FTD with Remote Access VPN enabled face active exploitation of this critical flaw; apply the patch immediately to prevent unauthorized access or lateral movement.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
Cisco released patches for CVE-2026-76418, a critical flaw in its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) products affecting the Remote Access SSL virtual private network (VPN) service. The vulnerability carries a CVSS score of 8.6 and allows unauthenticated remote attackers to exploit the devices. This marks the second SSL VPN zero-day in Cisco's firewall portfolio since August.
Why it matters: Organizations running Cisco ASA or FTD firewalls with SSL VPN enabled face immediate risk from active exploitation; apply patches urgently as the vulnerability requires no credentials to trigger.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
Cisco released patches for CVE-2026-76418, an actively exploited remote code execution vulnerability in Secure Firewall ASA and FTD products. The flaw allows unauthenticated attackers to compromise affected devices through the remote access SSL virtual private network (VPN) service. This is the second zero-day in Cisco firewalls targeted since August.
Why it matters: Organizations running Cisco Secure Firewall ASA or FTD with remote access VPN enabled face immediate risk from active exploitation; patch deployment should be prioritized today.
- Source published
- First seen by Cybersecurity Tracker