The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
This vulnerability is being actively exploited in the wild, according to the CISA Known Exploited Vulnerabilities catalog. CISA added it on .
CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
- Identifier
- CVE-2026-76418
- Published
- Record updated
- Fixed in
- The source references a patch, a mitigation or a vendor advisory.
- Known exploitation
- Listed in the CISA Known Exploited Vulnerabilities catalog since October 29, 2026.
- EPSS
- 0.8%
Summary
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contain an unchecked return value that leads to a NULL pointer dereference. An unauthenticated, remote attacker can trigger it to make the device reload unexpectedly, causing a denial of service (DoS) condition.
Mitigation
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA's BOD 26-04 Prioritizing Security Updates Based on Risk and CISA's "Forensics Triage Requirements." Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. Due date: 2026-11-01.