Cisco patches an exploited zero-day DoS in the SSL VPN of its ASA and FTD firewalls

On October 29, 2026, Cisco released fixes for CVE-2026-76418, a denial-of-service flaw exploited in the SSL VPN service of its ASA and FTD firewalls, triggerable without authentication. For network teams, the priority is to patch — or to disable secondary authentication on tunnel groups while waiting.