CVE-2026-20079 Scanner
CVE-2026-20079 Scanner - Authentication Bypass vulnerability in Cisco Secure Firewall Management Center
Used 2.9k times · 5.9k assets checked · domain, subdomain, ipv4
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2026-20079
10.0
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
cisco secure firewall management center (fmc)
Updated Sep 22, 2026View on NVD →
S4E scanner
CVE history: cisco secure firewall management center (fmc)
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →