EUVD Vulnerability Catalog
Actively Exploited (KEV)
EUVD-2026-112462
Severity: HIGH
Base Score: 8.6
CVSS Version: 3.1
Vulnerability Description
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
CVSS Vector Analysis
Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
▪
Attack Vector (AV): Network
▪
Attack Complexity (AC): Low
▪
Privileges Required (PR): None
▪
User Interaction (UI): None
▪
Scope (S): Changed
▪
Confidentiality Impact (C): None
▪
Integrity Impact (I): None
▪
Availability Impact (A): High
Affected Vendors & Systems
Vendor
Cisco
References & Advisory Links
Metadata Profile
Database Authority
European Union Agency for Cybersecurity (ENISA) EUVD
Assigner
cisco
EPSS Probability
0
Known Aliases
GHSA-3whv-82g3-5cwx
CVE-2026-76418
Published On
2026-10-28
Last Updated
2026-10-29
Exploited Since
2026-10-29