Cisco warns of an exploited flaw in its firewalls that allows them to be rebooted remotely via VPN

Cisco published an advisory on 28 October about vulnerability CVE-2026-76418 in the remote access SSL VPN service of its Secure Firewall ASA and FTD firewalls, according to Cybersecurity News. The flaw allows an unauthenticated remote attacker to force the device to reboot, which cuts off remote access, when secondary authentication is configured. It has a score of 8.6 out of 10.

According to that outlet, Cisco's security team learned in October that the flaw was being exploited, although the advisory does not identify attackers or victims or report any data theft.

Cisco has released fixed versions of ASA and FTD and does not offer a workaround, although it does offer temporary measures in the tunnel group configuration, according to Cybersecurity News.

Story under review: we have only been able to open one source; Cisco's advisory could not be opened, and we have not confirmed whether the US agency CISA has added it to its catalogue of exploited vulnerabilities. The advisory is dated 28 October, at the limit of the 24-hour window.