CVE-2026-76418

HIGH CISA KEV
ACT NOW Priority: 0.05 BB Relevance: 77/100
Published: 2026-10-28 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Changed
C: None
I: None
A: High

Description

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.

CISA Known Exploited Vulnerability

Vendor / Product Cisco — Secure Firewall ASA Software and Cisco Secure FTD Software
Date Added 2026-10-29
Remediation Due 2026-11-01
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76418

Weakness Classification (1)

Affected Software (419)

VendorProductVersion
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.1
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.1
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.1.28
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.2
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.2.3
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.2.7
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.2.11
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.2.13
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.2.14
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.3.3
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.3
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.3.14
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.1
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.3.15
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.1.3
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.2
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.3.19
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.3.23
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.2.5
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.4
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.2.7
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.4.9
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.2.8
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.4.14
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.3
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.5
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.4.18
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.9
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.3.39
Showing 30 of 419 entries

Bug Bounty Relevance

77 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction
✓ Known exploited (KEV)

CVSS Score

8.6 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS — Exploitation Probability

0.57%
Raw Score 0.005740
Percentile 47.3%
Date 2026-10-29

Intelligence Sources

kev ref →
mitre ref →
nvd ref →