Exploited vulnerabilitiesBriefConfirmed by two or more outlets
Cisco ASA / FTD NULL-dereference DoS (CVE-2026-76418)
CVSS 8.6. KEV: 29 Oct 2026 alongside GitLab.
- Disclosed
What happened
- CVSS 8.6. KEV: 29 Oct 2026 alongside GitLab. Cisco Secure Email Gateway CVE-2026-76519 was added to KEV on 14 Oct.
Live scores
Live scores
CVE-2026-76418- EPSS
- 0.008
low predicted chance of attack - VEDAS
- 0.742
some exploit evidence - On CISA KEV
- Yes, since 2026-10-29
- Detection rule
- None yet
Live scores
CVE-2026-76519- EPSS
- 0.022
some chance of attack soon - VEDAS
- 0.516
some exploit evidence - On CISA KEV
- Yes, since 2026-10-14
- Detection rule
- None yet
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.