Cisco releases security updates to patch a denial-of-service zero-day vulnerability affecting its Secure Firewall ASA and FTD software used for remote access SSL VPN. The flaw is being exploited by attackers to remotely crash vulnerable firewall devices, with Cisco describing the issue as actively used in the wild.
The outlets agree the vulnerability is tracked as CVE-2026-76418 and involves the Remote Access SSL VPN service. SecurityWeek and The Hacker News both cite a CVSS score of 8.6 and describe the impact as allowing unauthenticated remote exploitation to force the device to crash.
SecurityWeek adds that this is the second Cisco firewall VPN zero-day exploitation since August, placing the disclosure in a broader timeline of similar incidents. Across coverage, the core focus remains on the affected products, the SSL VPN component involved, and the availability of patches from Cisco to mitigate the reported denial-of-service risk.
