Cisco has released patches for a high-severity vulnerability in its Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that the company says is being actively exploited in the wild.

The flaw, tracked as CVE-2026-76418, carries a CVSS score of 8.6. According to Cisco, successful exploitation could allow an unauthenticated, remote attacker to cause a denial-of-service condition, crashing the affected firewall.

Why It Matters

ASA and FTD devices are widely deployed at network perimeters to handle VPN connections and firewall policy enforcement. A remotely triggerable crash on these systems, with no authentication required, can disrupt VPN access and broader network security controls for an organization, making this a high-priority issue for security teams running Cisco Secure Firewall products.

The active exploitation confirmed by Cisco raises the urgency for administrators to act quickly, since attackers are already leveraging the flaw rather than it existing only as a theoretical risk.

What Organizations Should Do

  • Identify all ASA and FTD deployments in the environment and confirm their current software versions.
  • Apply Cisco’s released patches for CVE-2026-76418 as soon as possible.
  • Monitor firewall logs for unexpected crashes, reboots, or service interruptions that may indicate exploitation attempts.
  • Review exposure of VPN-facing interfaces and restrict access where feasible until patches are confirmed deployed.

Cisco’s advisory underscores the continued targeting of edge security appliances, which remain attractive targets for attackers due to their internet-facing nature and critical role in network defense. Organizations running Secure Firewall ASA or FTD software should treat this patch as a priority deployment.