Cisco patches actively exploited zero-day allowing remote crash of VPN firewalls
High-severity denial-of-service flaw affects ASA and FTD devices with SSL VPN enabled; exploitation already in the wild.
Cisco has released security updates to patch a denial-of-service zero-day vulnerability, tracked as CVE-2026-76418, that attackers are actively exploiting to remotely crash vulnerable Adaptive Security Appliance (ASA) and Threat Defense (FTD) firewall devices.