cyber.hendryadrian.com
Security News · securityweek.com

Cisco Fixes 50 Vulnerabilities Across Enterprise Networking Products

· Original article ↗

Summary

Cisco released 25 advisories addressing 50 vulnerabilities, including two critical flaws in Secure FMC that could enable root access. Cisco says it is unaware of in-the-wild exploitation and advises users to update.

Key points

  • Cisco’s March 2026 release includes 25 security advisories covering 50 vulnerabilities.
  • Forty-eight vulnerabilities affect ASA Firewall, Secure FMC, and Secure FTD appliances.
  • CVE-2026-20079 is a critical Secure FMC web-interface authentication bypass that could allow arbitrary scripts and root access.
  • CVE-2026-20131 is a critical insecure-deserialization flaw that could enable arbitrary code execution and root privileges; internet-inaccessible FMC management interfaces have lower exploitation risk.
  • Nine high-severity flaws could enable SQL injection, denial of service, or sensitive-file access or modification.
  • Cisco also patched medium-severity flaws in Webex and ClamAV and says it is unaware of exploitation in the wild.

Article Details

Event Type
Cisco released patches for 50 vulnerabilities across its products, including critical flaws affecting enterprise networking appliances.
Impact
CVE-2026-20079 could allow authentication bypass, script and command execution, and root access on affected Cisco Secure FMC deployments. CVE-2026-20131 could allow arbitrary code execution and privilege escalation to root on affected Secure FMC deployments. Other vulnerabilities could enable SQL injection, denial-of-service, or sensitive-file access. Cisco said it was not aware of exploitation in the wild and advised users to update.

CVE

CVE-2026-20079Cisco · Cisco Secure Firewall Management Center (FMC)The first of them, tracked as CVE-2026-20079 (CVSS score of 10/10), is described as an authentication bypass in the web interface of Cisco Secure FMC software.CVE-2026-20131Cisco · Cisco Secure Firewall Management Center (FMC)The web interface of Secure FMC is also impacted by CVE-2026-20131 (CVSS score of 10/10), a critical issue that could allow attackers to execute Java code with root privileges.

Vendors

CiscoCisco on Wednesday announced fixes for 50 vulnerabilities across its products, including 48 affecting Firewall ASA, Secure FMC, and Secure FTD appliances.

Products

Cisco FTDCisco on Wednesday announced fixes for 50 vulnerabilities across its products, including 48 affecting Firewall ASA, Secure FMC, and Secure FTD appliances.ClamAVCisco also announced patches for medium-severity security defects in Webex and ClamAV.Firewall ASACisco on Wednesday announced fixes for 50 vulnerabilities across its products, including 48 affecting Firewall ASA, Secure FMC, and Secure FTD appliances.Secure FMCCisco on Wednesday announced fixes for 50 vulnerabilities across its products, including 48 affecting Firewall ASA, Secure FMC, and Secure FTD appliances.WebExCisco also announced patches for medium-severity security defects in Webex and ClamAV.

Related Articles