Security Advisory

Cisco Product Security Update Advisory

  • Nov 02 2026
Cisco Product Security Update Advisory

Overview

Cisco has released a security update to address a vulnerability found in its products. Users of these products should update to the latest version.

Affected Products

  • Cisco Secure Firewall ASA Software. – Cisco Secure Firewall FTD Software. – Cisco Expressway-C and Cisco Expressway-E.

Resolved Vulnerabilities

  • CVE-2026-76418 is a denial-of-service vulnerability in the SSL-VPN service of Cisco Secure Firewall ASA and FTD Software.
  • CVE-2026-76490 is an out-of-bounds write vulnerability affecting Cisco Expressway-C and Expressway-E. – CVE-2026-76491 is a vulnerability in Cisco Expressway-C and Expressway-E that can trigger an assertion failure.
  • CVE-2026-76492 is a null pointer dereference vulnerability affecting Cisco Expressway-C and Expressway-E. – CVE-2026-76493 is an unhandled exception vulnerability affecting Cisco Expressway-C and Expressway-E.
  • CVE-2026-76494 is a code injection vulnerability affecting Cisco Expressway-C and Expressway-E.
  • CVE-2026-76495 is a vulnerability involving improper permission assignment for critical resources in Cisco Expressway-C and Expressway-E.
  • CVE-2026-76496 is a vulnerability involving improper link parsing prior to file access in Cisco Expressway-C and Expressway-E.
  • CVE-2026-76497 is a vulnerability involving the use of insecure temporary files in Cisco Expressway-C and Expressway-E.

Applicable Versions and Patches

  • CVE-2026-76418 affects Cisco Secure Firewall ASA Software versions 9.16 and earlier, 9.18, 9.20, 9.22, 9.23, 9.24, and Cisco Secure Firewall FTD Software versions 7.0 and earlier, 7.2, 7.4, 7.6, 7.7, 10.0, and 10.1.
  • The affected patches are Cisco Secure Firewall ASA Software 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.48, 9.24.1.27, 9.24.10.1, and Cisco Secure Firewall FTD Software versions 7.0.11, 7.2.13, 7.4.9, 7.6.7, 7.7.14, 10.0.3, and 10.1.1.
  • CVE-2026-76490 through CVE-2026-76497 affect Cisco Expressway-C and Expressway-E versions X14 and earlier, as well as X15.5.3 and earlier.
  • The affected versions are Cisco Expressway-C and Cisco Expressway-E X15.5.20.

Note

The latest update includes Vulnerability Patches, and you should update to the latest version of the patch as instructed on the reference website.

Tags:
Previous Post