{"id":"EM-20261029-TX4V","url":"https://cyber.eventmonitor.net/incident/EM-20261029-TX4V/","type":"cve","title":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability","subtitle":"CVE-2026-76418","subject":"CVE-2026-76418","status":"Confirmed","severity":"high","affected":["Cisco Secure Firewall ASA Software and Cisco Secure FTD Software"],"headline":"12 hours from first report to confirmed exploitation.","born":"2026-10-29T12:00:00.000Z","firstSignal":"2026-10-29T00:00:00.000Z","lastSignal":"2026-10-30T14:11:44.000Z","updated":"2026-11-04T09:04:34.499Z","revision":2,"life":[{"status":"Born","at":"2026-10-29T12:00:00.000Z","why":"second independent source: C1 CISA Known Exploited Vulnerabilities"},{"status":"Developing","at":"2026-10-29T12:00:00.000Z","why":"signals keep joining"},{"status":"Confirmed","at":"2026-10-29T12:00:00.000Z","why":"CISA added it to Known Exploited Vulnerabilities"}],"changeLog":[{"at":"2026-10-29T00:00:00.000Z","what":"First signal: C13 CERT-FR (ANSSI)"},{"at":"2026-10-29T12:00:00.000Z","what":"Born: second source, C1 CISA Known Exploited Vulnerabilities. Page EM-20261029-TX4V created."},{"at":"2026-10-29T12:00:00.000Z","what":"Severity raised to High by C1"},{"at":"2026-10-29T12:00:00.000Z","what":"Source joined: C2 CISA Cybersecurity Advisories"},{"at":"2026-10-29T12:00:00.000Z","what":"Status: Confirmed (CISA added it to Known Exploited Vulnerabilities)"},{"at":"2026-10-30T14:11:44.000Z","what":"Source joined: C15 NCSC-NL"}],"stages":[{"name":"Disclosed","at":"2026-10-29T00:00:00.000Z","detail":"C13 first to name it"},{"name":"Scored","at":"2026-10-29T00:00:00.000Z","detail":"No CVSS yet · EPSS 0.8%"},{"name":"Exploited","at":"2026-10-29T12:00:00.000Z","detail":"C1 CISA KEV, fix by 2026-11-01"},{"name":"Advisories","at":"2026-10-29T00:00:00.000Z","detail":"3 government and CERT sources"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"When fixed: KEV deadline 2026-11-01, then 14 quiet days"}],"signals":[{"at":"2026-10-29T00:00:00.000Z","source":"C13","sourceName":"CERT-FR (ANSSI)","role":"Government","severity":2,"title":"Vulnérabilité dan  le  produit  Ci co (29 octobre 2026)","text":"Une vulnérabilité a été découverte dans les produits Cisco. Elle permet à un attaquant de provoquer un déni de service à distance. Cisco indique que la vulnérabilité CVE-2026-76418 est activement exploitée.","url":"https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1412/"},{"at":"2026-10-29T12:00:00.000Z","source":"C1","sourceName":"CISA Known Exploited Vulnerabilities","role":"Exploited List","severity":3,"title":"CVE-2026-76418 added to KEV: Ci co Secure Firewall ASA Software and Ci co Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability","text":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},{"at":"2026-10-29T12:00:00.000Z","source":"C2","sourceName":"CISA Cybersecurity Advisories","role":"Government","severity":3,"title":"CISA Add  Two Known Exploited Vulnerabilitie  to Catalog","text":"CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability These types","url":"https://www.cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog"},{"at":"2026-10-30T14:11:44.000Z","source":"C15","sourceName":"NCSC-NL","role":"Government","severity":2,"title":"NCSC-2026-0463 [1.00] [M/H] Kwet baarheid verholpen in Ci co Secure Firewall ASA en FTD Software","text":"Cisco heeft een ernstige kwetsbaarheid verholpen in Cisco Secure Firewall Adaptive Security Appliance (ASA) en Cisco Secure Firewall Threat Defense (FTD). Cisco bevestigt dat de kwetsbaarheid actief wordt misbruikt. Deze kwetsbaarheid met kenmerk CVE-2026-76418 heeft een CVSS-score van 8.6 en bevindt zich in de Remote Access SSL VPN-functionaliteit. Een niet-geauthenticeerde kwaadwillende kan de k","url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0463"}],"crowd":[],"reference":{"nvd":null,"kev":{"added":"2026-10-29","due":"2026-11-01","ransomware":"Unknown","vendor":"Cisco","product":"Secure Firewall ASA Software and Cisco Secure FTD Software","name":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability"},"epss":{"epss":0.00821,"pct":0.57342,"at":1793783074499},"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}