CVE-2026-20316
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced. Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.
Key facts
- CVSS score
- 5.3 (v3.1)
- Severity
- MEDIUM
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N- Weakness (CWE)
- CWE-259
- EPSS score
- 35.1% (98th percentile)
- In CISA KEV
- Yes, added July 29, 2026
- In EU EUVD
- Yes (EUVD-2026-50404)
- Published
- July 29, 2026
- NVD last modified
- September 16, 2026
- Status
- Analyzed
CISA Known Exploited Vulnerability
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Added to the KEV catalog on July 29, 2026; federal remediation due August 1, 2026. Known to be used in ransomware campaigns.
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2026-50404 in the EU Vulnerability Database. ENISA flags it as known exploited. Last updated in EUVD on September 16, 2026.
View on the EU Vulnerability DatabaseAffected products
- cisco / secure firewall management center
Certified products that may be affected
1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.
- Cisco Secure Firewall Threat Defense (FTD) 7.4 with Secure Firewall Management Center (FMC) 7.4 and Secure Client 5.1 - Cisco Systems, Inc. - Common Criteria NSCIB-CC-2400046-01-CR - active
References
Last updated September 18, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain