CVE
CVE-2026-20079
- First Reported
- Sep 11, 2026
- Latest Reported
- Sep 16, 2026
CVE Enrichment
- CVSS
- 10.0 CRITICAL
- EPSS
- 88.18%
- EPSS Percentile
- 99.77%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- psirt@cisco.com
- Published
- 05-Mar-2026 01:16
- Last Modified
- 17-Sep-2026 00:17
- EPSS Date
- 2026-10-11
- CWE
- CWE-288
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:N /
UI:N /
S:C /
C:H /
I:H /
A:H
CISA KEV Details
- Date Added
- 2026-09-09
- Remediation Due
- 2026-09-12
- Known Ransomware Campaign Use
- Unknown
- Required Action
- Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Notes
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20079
Affected Products / Versions
- cisco / secure_firewall_management_center
Version / affected range: 7.0.0
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.0.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.1.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.2.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.3
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.4
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.5
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.6
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.6.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.6.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.6.3
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.3:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.7
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.7:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.8
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.8:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.8.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.8.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.0.9
cpe:2.3:a:cisco:secure_firewall_management_center:7.0.9:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.1.0
cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.1.0.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.1.0.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.1.0.3
cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.0
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.0.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.3
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.3.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.4
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.4.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.5
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.5.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.5.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.6
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.6:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.7
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.7:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.8
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.8.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.9
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.9:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.10
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.10:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.10.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.10.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.10.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.10.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.2.11
cpe:2.3:a:cisco:secure_firewall_management_center:7.2.11:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.3.0
cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.3.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.3.1.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.3.1.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.0
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.0:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.1.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.2.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.2.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.2.3
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.3:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.2.4
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.4:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.3
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.3:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.4
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.4:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.5
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.5:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.6
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.6:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.4.7
cpe:2.3:a:cisco:secure_firewall_management_center:7.4.7:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.6.0
cpe:2.3:a:cisco:secure_firewall_management_center:7.6.0:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.6.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.6.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.6.2
cpe:2.3:a:cisco:secure_firewall_management_center:7.6.2:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.6.2.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.6.2.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.6.3
cpe:2.3:a:cisco:secure_firewall_management_center:7.6.3:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.6.4
cpe:2.3:a:cisco:secure_firewall_management_center:7.6.4:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.6.5
cpe:2.3:a:cisco:secure_firewall_management_center:7.6.5:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.7.0
cpe:2.3:a:cisco:secure_firewall_management_center:7.7.0:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.7.10
cpe:2.3:a:cisco:secure_firewall_management_center:7.7.10:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.7.10.1
cpe:2.3:a:cisco:secure_firewall_management_center:7.7.10.1:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.7.11
cpe:2.3:a:cisco:secure_firewall_management_center:7.7.11:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 7.7.12
cpe:2.3:a:cisco:secure_firewall_management_center:7.7.12:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 10.0.0
cpe:2.3:a:cisco:secure_firewall_management_center:10.0.0:*:*:*:*:*:*:* - cisco / secure_firewall_management_center
Version / affected range: 10.0.1
cpe:2.3:a:cisco:secure_firewall_management_center:10.0.1:*:*:*:*:*:*:*
References
- psirt@cisco.com
- af854a3a-2127-422b-91ae-364da2661108
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CISA Advisory
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (2)
- exploiting Firewall Management Center, including Cyclops Blink espionage and Qilin ransomware. CVE-2026-20079, CVSS 10.0, allows unauthenticated root access; CVE-2026-20316 exposes static credentials that can Security Roundup: AI-Assisted Intrusions, Exploited Flaws and Industry Moves
- CVE reference: CVE-2026-20079 Metasploit 6.5.4 Adds 16 Modules, Including Exploits for Five CISA KEV Vulnerabilities
CVE (18)
Malware (1)
People (25)
Threat Actors (3)
Vendors (14)
Products (39)
Tools (2)
Industries (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.