Event Monitor Cyber
EM-20261029-TX4V VulnerabilityHigh severity

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability

CVE-2026-76418 · Cisco Secure Firewall ASA Software and Cisco Secure FTD Software

Share

16 hours from first report to confirmed exploitation.

Status
Confirmed

Since : CISA added it to Known Exploited Vulnerabilities.

First Signal
Oct 28 20:18 UTCC6 NVD CVE API 2.0
Page Born
Oct 29 00:00 UTCsecond source joined
Last Signal
Oct 30 14:11 UTC6 days before snapshot
Sources
54 official · 1 research, news or crowd
Open For
7 daysso far

Life Of This Page

  1. 1
    Born
    A second, independent source names it.
  2. 2
    Developing
    New signals join; severity can move.
  3. 3
    Confirmed · Now
    CISA KEV lists it, or exploitation in the wild is reported.
  4. 4
    Resolved
    Not yet
    Past the fix deadline and 14 days with no new signal.
  5. 5
    Archived
    Not yet
    30 days after resolved. Read only; the link keeps working. Reopens if it comes back.

The ID never changes, and earlier addresses keep working. A correction is logged, never overwritten. If two pages turn out to be one incident, the later one points to the earlier.

Vulnerability Lifecycle

  1. Disclosed: reached
    Oct 28 20:18 UTC
    C6 NVD published
  2. Scored: reached
    Oct 28 20:18 UTC
    CVSS 8.6 · EPSS 0.8%
  3. Exploited: reached
    Oct 29 12:00 UTC
    C1 CISA KEV, fix by 2026-11-01
  4. Advisories: reached
    Oct 29 00:00 UTC
    3 government and CERT sources
  5. Vendor Response: not yet
    Not yet
    None in sources yet
  6. Resolved: not yet
    Not yet
    When fixed: KEV deadline 2026-11-01, then 14 quiet days

Timeline

Oct 2912:00Oct 3012:00Oct 31BornConfirmedC6 NVD CVE API 2.0C13 CERT-FR (ANSSI)C1 CISA Known Exploited VulnerabilitC2 CISA Cybersecurity AdvisoriesC15 NCSC-NL

Point at a mark to read it. Squares are signals, colored by severity; every one is also listed under Signals.

Signals

  1. NCSC-2026-0463 [1.00] [M/H] Kwetsbaarheid verholpen in Cisco Secure Firewall ASA en FTD Software (opens source in a new tab) Cisco heeft een ernstige kwetsbaarheid verholpen in Cisco Secure Firewall Adaptive Security Appliance (ASA) en Cisco Secure Firewall Threat Defense (FTD). Cisco bevestigt dat de kwetsbaarheid actief wordt misbruikt. Deze… Med severityGovernmentC15 NCSC-NL
  2. CISA Adds Two Known Exploited Vulnerabilities to Catalog (opens source in a new tab) CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or W… High severityGovernmentC2 CISA Cybersecurity Advisories
  3. CVE-2026-76418 added to KEV: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability (opens source in a new tab) Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to re… High severityExploited ListC1 CISA Known Exploited Vulnerabilities
  4. Vulnérabilité dans les produits Cisco (29 octobre 2026) (opens source in a new tab) Une vulnérabilité a été découverte dans les produits Cisco. Elle permet à un attaquant de provoquer un déni de service à distance. Cisco indique que la vulnérabilité CVE-2026-76418 est activement exploitée. Med severityGovernmentC13 CERT-FR (ANSSI)
  5. CVE-2026-76418 (CVSS 8.6) (opens source in a new tab) A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote atta… High severityDatabaseC6 NVD CVE API 2.0