Cisco disclosed two separate high-severity vulnerabilities in Secure Firewall Management Center software: CVE-2026-20079 (authentication bypass, first released March 4) and CVE-2026-20316 (static credential flaw actively exploited in zero-day attacks). Both require urgent patching.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
New Cisco updates: CRITICAL vulnerability, first released on March 4: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability https:// sec.cloudapps.cisco.com/securi ty/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 High severity: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerabili
Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices. [...]
this outlet adds: unauthorize, https, bleepingcomputer, news, secu, rity