Cisco patches exploited firewall VPN zero-day that can crash devices

SecurityWeek and BleepingComputer report Cisco patched CVE-2026-76418, which Cisco says attackers have exploited. On affected ASA and FTD firewalls, unauthenticated attackers can force a restart if the SSL VPN login service is reachable and a tunnel group uses secondary authentication. SecurityWeek says this is the second such denial-of-service zero-day since August. Cisco recommends upgrading to a fixed release.