{"id":246173,"date":"2026-10-30T03:49:39","date_gmt":"2026-10-30T08:49:39","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/10\/cisco-patches-actively-exploited-asa-and-ftd-vpn-flaw-that-can-crash-firewalls"},"modified":"2026-10-30T03:49:39","modified_gmt":"2026-10-30T08:49:39","slug":"cisco-patches-actively-exploited-asa-and-ftd-vpn-flaw-that-can-crash-firewalls","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/10\/cisco-patches-actively-exploited-asa-and-ftd-vpn-flaw-that-can-crash-firewalls","title":{"rendered":"Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls"},"content":{"rendered":"\n<p>The vulnerability, tracked as <strong><a href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-asaftd-tunnel-dos-s6mgkb75\" target=\"_blank\">CVE-2026\u201376418<\/a><\/strong>, is rated 8.6 on the CVSS scoring system. Successful exploitation could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial-of-service (DoS) condition.<\/p>\n<p>According to Cisco, the issue is rooted in the Remote Access SSL VPN service of ASA and FTD software.<\/p>\n<p>\u201cThis vulnerability is due to logic errors when secondary authentication is configured on a tunnel group,\u201d it said in a Wednesday advisory. \u201cAn attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The vulnerability, tracked as CVE-2026\u201376418, is rated 8.6 on the CVSS scoring system. Successful exploitation could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial-of-service (DoS) condition. According to Cisco, the issue is rooted in the Remote Access SSL VPN service of ASA and FTD software. \u201cThis vulnerability [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1492],"tags":[],"class_list":["post-246173","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=246173"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/246173\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=246173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=246173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=246173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}