Summary
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
- Vendor
- Cisco
- Product
- Secure Firewall ASA Software and Cisco Secure FTD Software
- Added to KEV
- Oct 29, 2026
- Remediation due
- Nov 1, 2026 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-690
- EPSS
- 0.8% as of Nov 10
In the news · last mention Nov 2
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References