Cisco Secure Firewall Management Center vulnerabilities

CVE-2026-20331 [CRITICAL] CWE-693 CVE-2026-20331: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software harden

CVE-2026-20323 [HIGH] CWE-295 CVE-2026-20323: A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the peer device and obtain access at the level of the manager role, which is equivalent to root. This vulnerability is due to improper management of the TLS cer

CVE-2026-20335 [HIGH] CWE-682 CVE-2026-20335: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening

CVE-2026-20334 [HIGH] CWE-710 CVE-2026-20334: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening

CVE-2026-20001 [MEDIUM] CWE-89 CVE-2026-20001: A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote at A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful expl

CVE-2024-20340 [MEDIUM] CWE-89 CVE-2024-20340: A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FM A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device

CVE-2026-20018 [MEDIUM] CWE-27 CVE-2026-20018: A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Softw A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating system. This vulnerability is due to insufficient val

CVE-2026-20044 [MEDIUM] CWE-269 CVE-2026-20044: A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root. This vulnerability is due to insufficient restrictions on remediation modules while in lockdown mode. An attacker could exploit this vulnerability by sending crafted i

CVE-2026-20003 [MEDIUM] CWE-89 CVE-2026-20003: A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote at A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful explo