Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
CISA required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Cisco
- Product
- Secure Firewall ASA Software and Cisco Secure FTD Software
- CVSS v3.1
- 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- EPSS
- 0.008 (p57)
- CISA KEV
- added 29 Oct 2026, due 1 Nov 2026 (0d)
- Exploitation
- observed in the wild
- Fix
- available
- Weakness
- CWE-690
- Exposure class
- Edge / VPN / firewall
- NVD status
- Received
Why it ranks 87 (Critical)
- CISA KEV listed, remediation due 2026-11-01
- CVSS v3.1 8.6 high
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Cisco)
- Covered by 5 independent sources
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- Vendor advisory (sec.cloudapps.cisco.com)
- CVE-2026-76418 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.