Vulnerability Disclosure12 Sept 2026·5 sources
Cisco confirms FMC auth-bypass CVE-2026-20079 exploited in the wild
Cisco updated its advisory for CVE-2026-20079, a critical authentication bypass in Cisco Secure Firewall Management Center, on 9 September 2026 to confirm active exploitation that its PSIRT became aware of in August. CISA added the CVE to its KEV catalogue the same day, with a 12 September 2026 due date for federal civilian agencies.
CiscoCVE-2026-20079FMC+2
