Security AlertCritical
Cisco patches second exploited firewall VPN zero-day since August
Oct 29, 2026 · Summarized by Fundy Tech from 3 sources
The 30-second version
Cisco fixed CVE-2026-76418, an unauthenticated VPN flaw in ASA and FTD software that attackers were exploiting in the wild. The bug can force affected firewalls to restart and disrupt service.
Key points
- Affects Cisco Secure Firewall ASA and FTD Remote Access SSL VPN.
- Attackers can trigger restarts without authenticating.
- Cisco learned in October the flaw was being exploited in the wild.
Why it matters
If your business uses Cisco firewalls, this could disrupt remote access and network availability. Home users do not appear directly affected, but the flaw matters for any organization relying on VPN access. Cisco says upgrading is the best fix.
Who’s affected: Cisco ASA and FTD VPN users
What to do
- Patch Cisco ASA and FTD now.
- Check whether SSL VPN is reachable from the Internet.
- Review tunnel group settings and secondary authentication.
- Use Cisco’s upgrade path instead of weakening security.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.