CISA added CVE-2026-76418 to its Known Exploited Vulnerabilities catalog on 2026-10-29. The flaw affects Cisco Secure Firewall ASA Software and Cisco Secure FTD Software and stems from an unchecked return value that can lead to a NULL pointer dereference. An unauthenticated, remote attacker could trigger the condition, causing the device to reload unexpectedly and creating a denial-of-service (DoS) state. CISA’s entry notes the vulnerability is actively exploited. The advisory’s required action is to apply mitigations according to the vendor’s instructions. 1