# Cisco confirms attackers are exploiting firewall flaw to crash devices

_Published Thursday, October 29, 2026 at 1:19 PM EDT · Security · Latest · Tier 2 — Notable_

![Cisco confirms attackers are exploiting firewall flaw to crash devices — Primary](https://img.helpnetsecurity.com/wp-content/uploads/2024/11/25153019/attack.webp)

Cisco confirmed that attackers are exploiting CVE-2026-76418 to crash its classic and next-generation firewalls, Help Net Security reported. An unauthenticated attacker can send a crafted request to the SSL remote-access VPN when secondary authentication is configured on a tunnel group, causing the device to reload.

Cisco recommends upgrading to fixed software because no workaround is available. Separately, CISA added VMware logging flaw CVE-2026-41709 to its exploited-vulnerability catalog on October 28, requiring federal civilian agencies to address it by November 11. The agency also added Linux privilege-escalation flaw Fragnesia, with an October 31 deadline and a forensic triage requirement.

## Sources

- [Help Net Security](https://www.helpnetsecurity.com/2026/10/29/php2shell-fragnesia-vmware-esx-zero-day/)

---
Canonical: https://techandbusiness.org/newswire/u4iWOpSCwvo5P5-GxJo6Qz
Published: 2026-10-29T17:19:00.888Z
Story chronology: 2026-10-29T16:25:10.000Z
Retrieved: 2026-10-29T20:40:44.519Z
Publisher: Tech & Business (techandbusiness.org)