CVE-2026-76418

The record

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected packages

Related vulnerabilities

• CVE-2026-87086 Tanium addressed a denial of service vulnerability in Provision. CWE-690
• CVE-2026-24160 NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an… CWE-690
• CVE-2026-24411 iccDEV has Undefined Behavior and Null Pointer Deference in… CWE-690
• CVE-2026-24410 iccDEV has Undefined Behavior and Null Pointer Deference in CIccProfileXml::ParseBasic() CWE-690
• CVE-2026-24409 iccDEV has Undefined Behavior and Null Pointer Deference in… CWE-690
• CVE-2026-24404 iccDEV has Null Pointer Deference and Undefined Behavior in CIccXmlArrayType() CWE-690
• CVE-2026-21689 iccDEV has Type Confusion in CIccProfileXml::ParseBasic() at… CWE-690
• CVE-2021-47186 In the Linux kernel, the following vulnerability has been resolved: tipc: check for null… CWE-690