Cisco Secure Firewall Management Center vulnerabilities

CVE-2026-20079 [CRITICAL] CWE-288 CVE-2026-20079: A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at

CVE-2026-20131 [CRITICAL] CWE-502 CVE-2026-20131: A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FM A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vuln

CVE-2026-20316 [MEDIUM] CWE-259 CVE-2026-20316: A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged

CVE-2026-20242 [CRITICAL] CWE-502 CVE-2026-20242: A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center ( A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream from a host that is configured in t

CVE-2026-20324 [CRITICAL] CWE-862 CVE-2026-20324: A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Managem A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions to write an arbitrary file to any location on the

CVE-2026-20340 [HIGH] CWE-502 CVE-2026-20340: A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execut A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is due to unsecured deserialization of web-management user-controlled data. An attacker could exploit this vulnerability by authenticating to the device and sending a crafted HTTP pay

CVE-2026-76420 [CRITICAL] CWE-285 CVE-2026-76420: A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector at boot time. An attacker could exploit this vuln

CVE-2026-20344 [HIGH] CWE-89 CVE-2026-20344: A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an au A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have a valid account on the device with the role of Security Approver, Access Admin, or Network Admin. This vulne

CVE-2026-20329 [CRITICAL] CWE-703 CVE-2026-20329: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software harden

CVE-2026-20332 [CRITICAL] CWE-284 CVE-2026-20332: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software harden

CVE-2026-20341 [CRITICAL] CWE-502 CVE-2026-20341: A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software cou A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is due to unsecured deserialization of untrusted data over the sftunnel management connection. An attacker could exploit this vulnerability by sending crafted

CVE-2026-20330 [CRITICAL] CWE-707 CVE-2026-20330: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software harden

CVE-2026-76412 [HIGH] CWE-264 CVE-2026-76412: A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authe A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error when checking the privilege level of a user who is invoking remote diagnostics. An attacker could exploit this vulnerability by authentic

CVE-2026-20342 [HIGH] CWE-639 CVE-2026-20342: A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenti A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability exists because user input is not being sanitized. An attacker could exploit this vulnerability by sending a crafted HTTPS request. A successful exploit could

CVE-2026-20333 [HIGH] CWE-697 CVE-2026-20333: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening

CVE-2026-20295 [HIGH] CWE-789 CVE-2026-20295: A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources during sftunnel TLS connection setup. An attacker cou

CVE-2026-20002 [HIGH] CWE-89 CVE-2026-20002: A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an au A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device

CVE-2026-76413 [HIGH] CWE-1259 CVE-2026-76413: A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Ci A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An attacker could exploit this vulnerability by perfo

CVE-2026-20336 [HIGH] CWE-664 CVE-2026-20336: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening

CVE-2026-20343 [HIGH] CWE-306 CVE-2026-20343: A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remo A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeatedly invoking the API. A successful exploit could allow t