CVE-2026-20316

mediumpriority · act · 90OT risk · criticalKEV · exploitedEU KEV · ENISAEPSS 0.351 · 98 %ileDEEUNLRUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV

Likely / severe?

35.1% (98th) EPSS

CVSS 5.3 · medium

Is it mine?

152 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

added 2026-07-29remediate by 2026-08-01

required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

EU KEVflagged by ENISAreported 2026-09-09patched 2026-08-05ransomware

Vulnerability in the web interface could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. EU victimology was confirmed. Comprehensive hardening scheduled (Week of September 14th).

EPSS · scored 2026-10-27

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user.  Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.   Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedCisco Secure Firewall Management Center (FMC) 10.0.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 10.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.6.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.6.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.6.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.8.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.0.9 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.10.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.10.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.11 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.3.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.4.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.5.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.5.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.8.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.2.9 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.3.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.3.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.3.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.3.1.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.2.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.2.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.2.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.4.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.6.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.6.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.6.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.6.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.6.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.6.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.6.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.7.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.7.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.7.10.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.7.11 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
FixedCisco Secure Firewall Management Center (FMC) 7.7.12 when installed on Cisco Secure Firewall Management Center (FMC) Appliancescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technical severity, 0–10. One row per scoring source.

5.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · ENISA EU

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · psirt@cisco.com USexploitability 3.9 · impact 1.4

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:Hsecondary · CVSS-BT (t0sche)

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · NCSC-NL NL

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · Cisco PSIRT US

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-259USCWE-259USCWE-259US

affected products (152)

Products and version ranges known to be affected.

showing 20 of 152

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2026-0271Kwetsbaarheid verholpen in Cisco Secure Firewall Management CenterNL2026-07-30csaf · ncsc_nlNL
Cisco heeft een kwetsbaarheid verholpen in Cisco Secure Firewall Management Center.
WID-SEC-W-2026-2575Cisco Secure Firewall Management Center: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2026-07-29csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Secure Firewall Management Center ausnutzen, um Informationen offenzulegen.
cisco-sa-fmc-static-cred-BET3CjhCisco Secure Firewall Management Center Software Static Credential Vulnerability2026-07-29csaf · cisco_csafUS
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced. Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-jfxK98ZP"]. In addition, for further documentation of improvements and fixes in Cisco Secure Firewall products, see Cisco Secure Firewall Adaptive Security Appliance Software, Secure Firewall Threat Defense Software, and Secure Firewall Management Center Software Hardening Release: September 2026 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN"].

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund cisco_csaf ncsc_nl NVD CVE.org MITRE

published 2026-07-29modified 2026-10-24

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan