CVE-2026-76418

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall ASA Software versions prior to 9.16.4.104 Cisco Secure Firewall FTD Software versions prior to 7.0.11

Description A logic error in the Remote Access SSL VPN service occurs when secondary authentication is configured on a tunnel group. This allows an unauthenticated remote attacker to send a crafted request to the SSL remote access VPN, triggering an unexpected device reload. This results in a denial of service (DoS) condition, disrupting VPN services and remote connectivity. Active exploitation of this issue has been reported.

Recommendations Update Cisco Secure Firewall ASA Software to version 9.16.4.104 or later. Update Cisco Secure Firewall FTD Software to version 7.0.11 or later. As a temporary mitigation, disable secondary authentication in tunnel groups or the DefaultWEBVPNGroup.