EUVD Vulnerability Catalog Actively Exploited (KEV)

EUVD-2026-112462

Severity: HIGH Base Score: 8.6 CVSS Version: 3.1

Vulnerability Description

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

CVSS Vector Analysis

Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

▪ Attack Vector (AV): Network
▪ Attack Complexity (AC): Low
▪ Privileges Required (PR): None
▪ User Interaction (UI): None
▪ Scope (S): Changed
▪ Confidentiality Impact (C): None
▪ Integrity Impact (I): None
▪ Availability Impact (A): High

Affected Vendors & Systems

Vendor Cisco

References & Advisory Links

Metadata Profile

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

cisco

EPSS Probability

0

Known Aliases
GHSA-3whv-82g3-5cwx CVE-2026-76418
Published On

2026-10-28

Last Updated

2026-10-29

Exploited Since

2026-10-29