#firewall
-
Cisco Confirms Exploitation of Critical Secure FMC Vulnerability
The CVE-2026-20079 vulnerability, with a maximum CVSS score of 10.0, allows attackers to bypass authentication and execute commands with root privileges. Cisco has acknowledged that it is already being used in attacks, and CISA has ordered government agencies to remediate the flaw by September 12.
-
Cisco: Embedded Credentials in Secure FMC Used in Zero-Day Attacks
Cisco is warning of active exploitation of CVE-2026-20316 in Secure Firewall Management Center, caused by static credentials hardcoded into the software. Patches have already been released, and there are no workarounds.