Back to Fastnexa
Under attack?
CyberBrief
Subscribe
Fastnexa

Cisco security advisory (AV26-1102) - Update 1

Used in attacksCriticalCanadian Centre for Cyber Security · Canadian Centre for Cyber Security·

At a glance

Severity
Critical
Used in attacks
Yes, 1 of 1 flaw named
Flaws named
CVE-2026-76418
Vendors and products
Cisco
Industries
Government
Reported by
1 outlet

As of October 28, 2026, Cisco is affected by a vulnerability in the following products:

  • Cisco Secure Firewall Adaptive Security Appliance (ASA)
    • Versions prior to 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.4, 9.24.1.27 and 9.24.10.1
  • Cisco Secure Firewall Threat Defense (FTD)
    • Versions prior to 7.0.11, 7.2.13, 7.4.9, 7.6.7, 7.7.14, 10.0.3 and 10.1.1
  • Cisco Network Management and Provisioning License (Smart Software Manager) On-Prem
    • Versions prior to 10-202610

Cisco indicates that CVE-2026-76418 is exploited in the wild.

Update 1
On October 29, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-76418 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

Originally published by Canadian Centre for Cyber Security. © Canadian Centre for Cyber Security. Written by Canadian Centre for Cyber Security.

Read at cyber.gc.ca ↗Official Source

Vulnerabilities referenced

  • CVE-2026-76418Not scored yet

    Cisco Secure Firewall ASA Software and Cisco Secure FTD Software

    Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.

    Used in attacks

    Added to CISA's list 2026-10-29

    Full record →

Fastnexa security experts

This story involves a flaw attackers are already using. Are you exposed?

A Fastnexa penetration tester can check whether CVE-2026-76418 or anything like it can be used against your websites, apps and network.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Coverage

One outlet has carried this so far.

  1. Canadian Centre for Cyber Security ↗Official SourceFirst reported

    2026-10-29 20:20 UTC

Related stories