Cisco says this firewall flaw is being exploited. You are only exposed if you turned on the extra authentication
2026-10-29Security
CVE-2026-76418 lets an unauthenticated attacker reload an ASA or FTD device, but only where secondary authentication is configured on a tunnel group. Both of Cisco's mitigations work by removing that hardening.