Vulnerability in Cisco Secure Firewall Management Center (Fmc)
CVE-2026-20079
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device.
EPSS: 0.359 (98.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Cisco Secure Firewall Management Center (Fmc) — versions 7.4.1, 7.6.1, 7.0.9
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2026-20079?
- CVE-2026-20079 is a critical-severity vulnerability in Cisco Secure Firewall Management Center (Fmc), classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 10.0/10. Published 2026-03-04.
- How severe is CVE-2026-20079?
- Critical severity. CVSS v3 base score is 10.0 out of 10.
- Is CVE-2026-20079 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.