CVE-2026-76418: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Cisco Secure Firewall ASA Software and Secure Firewall FTD Software deployments with the Remote Access SSL VPN service and secondary authentication configured on a tunnel group are affected. The provided information does not indicate that configurations without secondary authentication are affected.
Does an attacker need VPN credentials or user interaction to trigger the denial of service?
No. The issue can be exploited remotely without authentication or user interaction by sending a crafted request while connecting to the SSL remote access VPN.
What is the operational impact of successful exploitation?
A successful exploit can cause the affected device to reload unexpectedly. This results in a denial-of-service condition for the device.