CVE-2026-20316

mediumPriorität · handeln · 90OT-Risiko · kritischKEV · ausgenutztEU KEV · ENISAEPSS 0.351 · 98. PerzentilDEEUNLRUUS
grimoire priorityP0 · Act now
Exploitable?
Yes · in the wild
CISA KEV
Likely / severe?
35.1% (98th) EPSS
CVSS 5.3 · medium
Is it mine?
152 products
Prüfe deine Angriffsfläche
Who says so?
6 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

hinzugefügt 2026-07-29beheben bis 2026-08-01

erforderliche Maßnahme Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

EU KEVgemeldet von ENISAgemeldet 2026-09-09gepatcht 2026-08-05ransomware

Vulnerability in the web interface could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. EU victimology was confirmed. Comprehensive hardening scheduled (Week of September 14th).

EPSS · bewertet 2026-10-27

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user.  Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.   Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenCisco Secure Firewall Management Center (FMC) 10.0.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 10.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.6.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.6.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.6.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.8.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.0.9 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.10.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.10.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.11 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.3.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.4.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.5.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.5.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.8.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.2.9 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.3.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.3.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.3.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.3.1.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.2.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.2.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.2.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.4.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.6.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.6.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.6.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.6.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.6.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.6.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.6.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.7.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.7.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.7.10.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.7.11 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Secure Firewall Management Center (FMC) 7.7.12 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · FSTEC (BDU) RU
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · ENISA EU
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · psirt@cisco.com USAusnutzbarkeit 3.9 · Auswirkung 1.4
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:Hsecondary · CVSS-BT (t0sche)
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · NCSC-NL NL
v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · Cisco PSIRT US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: active · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-259USCWE-259USCWE-259US
05

betroffene Produkte (152)

Betroffene Produkte und Versionsbereiche.

20 von 152 angezeigt
06

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

  • NCSC-2026-0271Kwetsbaarheid verholpen in Cisco Secure Firewall Management CenterNL2026-07-30csaf · ncsc_nlNL

    Cisco heeft een kwetsbaarheid verholpen in Cisco Secure Firewall Management Center.

  • WID-SEC-W-2026-2575Cisco Secure Firewall Management Center: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2026-07-29csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Secure Firewall Management Center ausnutzen, um Informationen offenzulegen.

  • cisco-sa-fmc-static-cred-BET3CjhCisco Secure Firewall Management Center Software Static Credential Vulnerability2026-07-29csaf · cisco_csafUS

    A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced. Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-jfxK98ZP"]. In addition, for further documentation of improvements and fixes in Cisco Secure Firewall products, see Cisco Secure Firewall Adaptive Security Appliance Software, Secure Firewall Threat Defense Software, and Secure Firewall Management Center Software Hardening Release: September 2026 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN"].

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundcisco_csafncsc_nlNVDCVE.orgMITRE
veröffentlicht 2026-07-29geändert 2026-10-24
09

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan