Live › vulnerability › CVE-2026-76418
Go to dashboardA logic error in the Remote Access SSL VPN service of Cisco ASA and FTD software, triggered when secondary authentication is set on a tunnel group, lets an unauthenticated remote attacker send a crafted connection request. The attacker can make the device reload unexpectedly, causing a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 20:35 UTC. All times on this page are UTC.
Organisations running Cisco ASA or Cisco Secure Firewall Threat Defense with the Remote Access SSL VPN service exposed to untrusted networks. The flaw only applies when secondary authentication is configured on a tunnel group, so devices without SSL remote access VPN or without that setting are likely not affected; the sources do not confirm the exact affected version range.
No product ranges from the sources yet.
show running-config tunnel-group.show version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
This page as .md · .json · in your agent: get_signal("CVE-2026-76418")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.