Cisco
4 articles
Attackers are rebooting Cisco ASA and FTD firewalls through the SSL VPN login. CVE-2026-76418 is on CISA KEV, due Nov 1
How to fix CVE-2026-76418: upgrade Cisco ASA to 9.20.4.50, 9.22.3.200 or the fixed release on your train, and FTD to 7.4.9, 7.6.7 or later. Exploited as a zero-day, added to CISA KEV on Oct 29. It reloads firewalls with secondary VPN auth; it does not run code.
HOL GuardExploited Cisco Secure Email Gateway AMP bug lets attackers write files as root, now on CISA KEV (CVE-2026-76519)
How to fix CVE-2026-76519: upgrade Content Scanner Tools to 25.3.0.5525+ (or AsyncOS 15.5.5-014 / 16.5.0-780). Exploited Cisco Secure Email Gateway AMP File Reputation bug writes files as root; CISA KEV due Oct 17.
HOL GuardCisco SD-WAN Manager admin API bypass hits CISA KEV
How to fix CVE-2026-76504: upgrade Cisco Catalyst SD-WAN Manager to 20.9.10.1 / 20.12.8.2 / 20.15.6.1 / 20.18.4.1 / 26.1.2.1 / 26.2.1
HOL GuardCisco SD-WAN Manager admin API open without a login (CVE-2026-76504)
How to fix CVE-2026-76504: upgrade Cisco Catalyst SD-WAN Manager to 20.9.10.1 / 20.12.8.2 / 20.15.6.1 / 20.18.4.1 / 26.1.2.1 / 26.2.1
HOL GuardRelated topics
Keep exploring
The engineering desk continues across the ecosystem: security research on shipping agents safely, and plugins that put the standards to work.