Metraipolis › archive › dc_ee3d7fcff43d

KEV CVE-2026-20079: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path…

Source: CISA KEV
Original: https://nvd.nist.gov/vuln/detail/CVE-2026-20079
License (as archived): CC0-1.0
Archived: 2026-10-07T08:10:33.292Z
SHA-256 of the archived text: fb06964b9211d7968e6aa4dbbe705594ce485b72373883780fef0b116d32bce3
Stable URL of this page: https://metraipolis.com/documento/dc_ee3d7fcff43d

How to cite

KEV CVE-2026-20079: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path… — CISA KEV, https://nvd.nist.gov/vuln/detail/CVE-2026-20079 (CC0-1.0); archived copy: https://metraipolis.com/documento/dc_ee3d7fcff43d (Metraipolis archive dc_ee3d7fcff43d, sha256 fb06964b9211d7968e6aa4dbbe705594ce485b72373883780fef0b116d32bce3)

BibTeX

@misc{dcee3d7fcff43d,
  title = {KEV CVE-2026-20079: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path…},
  howpublished = {CISA KEV},
  url = {https://nvd.nist.gov/vuln/detail/CVE-2026-20079},
  note = {License CC0-1.0; archived copy https://metraipolis.com/documento/dc_ee3d7fcff43d; sha256 fb06964b9211d7968e6aa4dbbe705594ce485b72373883780fef0b116d32bce3},
  year = {2026}
}

Archived text

Reproduced under CC0-1.0. Attribution: CISA KEV, https://nvd.nist.gov/vuln/detail/CVE-2026-20079. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

CVE-2026-20079 è nel catalogo CISA delle vulnerabilità SFRUTTATE attivamente (Known Exploited Vulnerabilities), aggiunta il 2026-09-09.
Prodotto: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Descrizione: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.
Azione richiesta (agenzie federali USA): Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. Scadenza: 2026-09-12.
Uso noto in campagne ransomware: Unknown
Debolezze: CWE-288
Note e riferimenti: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20079

Fonte: catalogo CISA KEV (CC0 1.0), versione 2026.10.04, consultato il 2026-10-06: https://www.cisa.gov/known-exploited-vulnerabilities-catalog