ACT NOWExploited vulnerability
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
What's happening and what to do
An unauthenticated remote attacker can crash the device by sending crafted traffic, causing it to reload unexpectedly and drop service; this flaw is being exploited in the wild. Cisco Secure Firewall ASA Software and Cisco Secure FTD Software. Apply the vendor's update now and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-29Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-11-01Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.