CVE-2026-76418: Cisco ASA/FTD Zero-Day, CVSS 8.6 [2026]

Cisco disclosed on October 28, 2026 that attackers are already crashing its ASA and FTD firewalls with a single crafted SSL VPN request. The flaw, tracked as CVE-2026-76418, scores CVSS 8.6 and needs no successful login, according to BleepingComputer’s report on the zero-day. For any team that runs remote access on a Cisco perimeter box, the date to remember is today, October 30.