Cisco confirms exploitation of CVE-2026-76418 in ASA/FTD SSL VPN. An unauthenticated request can reboot vulnerable firewalls when secondary authentication is configured. For admins: check tunnel groups, assess VPN exposure, and install fixed builds. Disabling secondary auth is listed as a mitigation, but it weakens protection. This is an availability risk, not a data breach. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75