Will Cisco ASA/FTD DoS zero-day be added to CISA KEV by Nov 15, 2026?
[Auto-closed — deadline passed with no qualifying event] Market deadline was November 5, 2026. Today is November 9, 2026 — the deadline has passed. The provided recent intel from CISA (dated November 6, 2026) reports one KEV addition: CVE-2026-19868 (SonicWall SonicOS SSLVPN). There is no mention of a Cisco ASA/FTD DoS zero-day being added to CISA KEV. No credible evidence from CISA, vendor advisories, or authoritative sources confirms this vulnerability was added to the KEV catalog by the November 15 resolution criteria date or by the November 5 market deadline.
Evidence: https://threatodds.com/markets/d582ba36-3078-457f-9456-d4d3dfaf3b39Market Overview
AI GENERATEDA zero-day denial-of-service vulnerability in Cisco Adaptive Security Appliance (ASA) and Threat Defense (FTD) software is being actively exploited by attackers to remotely crash vulnerable firewall devices. Cisco has released security updates to patch the flaw (Bleeping Computer). The question is whether this vulnerability meets CISA's criteria for inclusion on the Known Exploited Vulnerabilities (KEV) catalog within 7 days.
Primary SourceResolution Criteria
Resolution will be determined by checking CISA's official KEV catalog (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) for confirmation of this Cisco ASA/FTD zero-day DoS vulnerability. A YES outcome requires the CVE to appear in KEV by Nov 15, 2026. Moderators will verify via official CISA advisories or CVE databases.