- 260/2026
- Medium
Cisco has released a security update to address a zero-day vulnerability affecting Cisco Secure Firewall Management Center (FMC) Software.
The addressed vulnerability could allow the unauthenticated remote attacker to log in to an affected device using a low-privilege account and access sensitive data within the impacted systems.
The addressed vulnerability:
Cisco Secure Firewall Management Center Software Static Credential Vulnerability (CVE-2026-20316):
- CVSS: 5.3
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Obtain Information
It should be highlighted that the Cisco PSIRT team is aware that the vulnerability “CVE-2026-20316″ is being actively exploited in the wild.
Vulnerabilities
CVE-2026-20316
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.