← Back to browse · API

CVE-2026-20079

Severity
CRITICAL
CVSS
10.0
EPSS
0.37671
Risk score
53.18
CISA KEV
No
PoC
No
Published
2026-03-04
Modified
2026-08-05
First seen
2026-08-05
Aliases
EUVD-2026-9438, GHSA-MV8W-C2QV-CGRG
Products
Cisco:Cisco Secure Firewall Management Center (FMC) 10.0.0, Cisco:Cisco Secure Firewall Management Center (FMC) 10.0.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.0, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.0.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.1.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.3, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.5, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.6.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.6.3, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.8, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.8.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.0.9, Cisco:Cisco Secure Firewall Management Center (FMC) 7.1.0, Cisco:Cisco Secure Firewall Management Center (FMC) 7.1.0.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.1.0.2, Cisco:Cisco Secure Firewall Management Center (FMC) 7.1.0.3, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.0, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.10, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.10.2, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.11, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.2, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.3.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.4, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.4.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.5, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.6, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.7, Cisco:Cisco Secure Firewall Management Center (FMC) 7.2.8.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.3.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.3.1.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.3.1.2, Cisco:Cisco Secure Firewall Management Center (FMC) 7.4.0, Cisco:Cisco Secure Firewall Management Center (FMC) 7.4.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.4.1.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.4.2.3, Cisco:Cisco Secure Firewall Management Center (FMC) 7.4.2.4, Cisco:Cisco Secure Firewall Management Center (FMC) 7.4.5, Cisco:Cisco Secure Firewall Management Center (FMC) 7.4.6, Cisco:Cisco Secure Firewall Management Center (FMC) 7.6.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.6.2, Cisco:Cisco Secure Firewall Management Center (FMC) 7.6.2.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.6.4, Cisco:Cisco Secure Firewall Management Center (FMC) 7.6.5, Cisco:Cisco Secure Firewall Management Center (FMC) 7.7.0, Cisco:Cisco Secure Firewall Management Center (FMC) 7.7.10, Cisco:Cisco Secure Firewall Management Center (FMC) 7.7.10.1, Cisco:Cisco Secure Firewall Management Center (FMC) 7.7.11, Cisco:Cisco Secure Firewall Management Center (FMC) 7.7.12
Sources
nvd CVE-2026-20079
euvd EUVD-2026-9438

Description

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.  This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device. 

References