GoKawiilCisco patches actively exploited DoS zero-day in ASA, FTD SSL VPN firewalls
Cisco has issued security updates for CVE-2026-76418, a high-severity flaw in ASA and FTD software that lets unauthenticated attackers remotely crash firewalls configured with webvpn and SSL VPN enabled. Cisco's PSIRT confirmed active exploitation in October 2026 but has not disclosed indicators of compromise or details on targeted organizations or attackers. Admins unable to patch immediately can mitigate by disabling secondary authentication on affected tunnel groups.