CVE Tools
Track your stack

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

BleepingComputerBy Lawrence Abrams

Reported exploitedSecure Firewall Management Center (FMC)Security Cloud Control Firewall Management

Our summary

Cisco has confirmed that CVE-2026-20079, a critical authentication bypass vulnerability in its Secure Firewall Management Center (FMC) software, is under active attack. This flaw, rated with a maximum CVSS score of 10.0, allows unauthenticated remote attackers to execute arbitrary scripts with root privileges by sending crafted HTTP requests to the device web interface.

The incident affects both Cisco Secure FMC Software and Security Cloud Control Firewall Management, though Cisco states the cloud-hosted service has already been patched. With no available workarounds, the vendor urges customers to immediately upgrade to the latest software release to mitigate the risk of full system compromise.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerInfraTrust report warns network management systems under attackCVE-2026-20079, CVE-2026-20316
  2. The Hacker NewsThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New StoriesCVE-2026-20079, CVE-2026-20316
  3. SecurityWeekCisco Fixes Dozens of Flaws Across FMC, ISE and Nexus DashboardCVE-2026-20079, CVE-2026-20316
  4. SecurityWeekRoot RCE Zero-Day in Cisco Secure Email Gateway Under Active ExploitationCVE-2026-20079, CVE-2026-20316
  5. Dark Reading'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops BlinkCVE-2026-20079, CVE-2026-20316
  6. Help Net SecurityWeek in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploitedCVE-2026-20079, CVE-2026-20316
  7. The Hacker NewsCisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin RansomwareCVE-2026-20079, CVE-2026-20316
  8. Cisco TalosWe've got one word for it, and it's usually the wrong oneCVE-2026-20079, CVE-2026-20316
  9. Help Net SecurityCisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)CVE-2026-20079, CVE-2026-20316
  10. SecurityWeekOrganizations Warned of Cisco Secure FMC ExploitationCVE-2026-20079, CVE-2026-20316

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store