[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fY14s4Z9WUcnXg1QOfvHz8gIl3P_kZkmwP7tapxjsa44":3,"g5a-risk:CVE-2026-20316":151},{"success":4,"data":5,"meta":148},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":26,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":53,"weaknesses":54,"weaknessesCount":41,"isActivelyExploited":4,"cisaInfo":63,"otxData":26,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":126,"notableEvents":127},"CVE-2026-20316","What is CVE-2026-20316?","A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.\r\n\r\nThis vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user. \r\nNote: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.  \r\nCisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.","A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to a...","2026-07-29T17:16:51.84","2026-09-16T21:17:10.15",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":31},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"psirt@cisco.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[],[],[],0.35096,[32,32,32,32,32,32,32],"Medium",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"cisco","secure_firewall_management_center","*","cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",1,[43,48],{"url":44,"source":45,"tags":46},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-fmc-static-cred-BET3Cjh","Cisco",[47],"Vendor Advisory",{"url":49,"source":50,"tags":51},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20316","CISA",[52],"US Government Resource",2,[55],{"id":56,"name":57,"description":58,"extendedDescription":59,"status":60,"abstraction":61,"structure":62},"CWE-259","Use of Hard-coded Password","The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.","A hard-coded password typically leads to a significant authentication failure that can be difficult for the system administrator to detect. Once detected, it can be difficult to fix, so the administrator may be forced into disabling the product entirely. There are two main variations:\nIn the Inbound variant, a default administration account is created, and a simple password is hard-coded into the product and associated with that account. This hard-coded password is the same for each installation of the product, and it usually cannot be changed or disabled by system administrators without manually modifying the program, or otherwise patching the product. If the password is ever discovered or published (a common occurrence on the Internet), then anybody with knowledge of this password can access the product. Finally, since all installations of the product will have the same password, even across different organizations, this enables massive attacks such as worms to take place.\nThe Outbound variant applies to front-end systems that authenticate with a back-end service. The back-end service may require a fixed password which can be easily discovered. The programmer may simply hard-code those back-end credentials into the front-end product. Any user of that program may be able to extract the password. Client-side systems with hard-coded passwords pose even more of a threat, since the extraction of a password from a binary is usually very simple.","Draft","Variant","Simple",{"shortDescription":64,"requiredAction":64,"vulnerabilityName":64,"dateAdded":26},"",[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2026-20316? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2026-20316, a medium severity cyber security vulnerability from 2026. High exploit probability (35.1%). A vulnerability in the ...","CVE-2026-20316, CVE-2026-20316 vulnerability, CVE-2026-20316 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, cisco security, secure_firewall_management_center vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2026-20316",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2026-20316","Cybersecurity","CVE-2026-20316, CVE-2026-20316 vulnerability, CVE-2026-20316 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":26,"Negate":26,"Nodes":93},[94],{"Operator":95,"Negate":96,"CPEMatch":97},"OR",false,[98,102,106,110,114,118,122],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":99,"VersionStartExcluding":26,"VersionStartIncluding":100,"VersionEndExcluding":26,"VersionEndIncluding":101},"7DFD0173-E045-4EF0-BC97-45BBFCFA1502","7.0.0","7.0.9",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":103,"VersionStartExcluding":26,"VersionStartIncluding":104,"VersionEndExcluding":26,"VersionEndIncluding":105},"9DBBB745-D7D2-4E11-ACC7-CE880B066D1E","7.2.0","7.2.11",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":108,"VersionEndExcluding":26,"VersionEndIncluding":109},"5CA67B3C-60F2-4373-81B6-FCA063518CB1","7.3.0","7.3.1.2",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":112,"VersionEndExcluding":26,"VersionEndIncluding":113},"CD49AB20-6E0A-4C1A-A775-D2EEA55D45D8","7.4.0","7.4.7",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":116,"VersionEndExcluding":26,"VersionEndIncluding":117},"9340872F-6A25-467A-BC63-957E1B7E817D","7.6.0","7.6.5",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":119,"VersionStartExcluding":26,"VersionStartIncluding":120,"VersionEndExcluding":26,"VersionEndIncluding":121},"BF37EF84-93E8-4D2F-BFEF-7754B74D1E3F","7.7.0","7.7.12",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":124,"VersionEndExcluding":26,"VersionEndIncluding":125},"7A5384FA-2700-4284-8AAD-27B8923732F3","10.0.0","10.0.1",[],[128,135,142],{"id":129,"eventType":130,"eventTime":131,"details":132,"label":133,"color":134},"6db5b554-7bb4-4d68-a788-8444a2e44a90","NEW_CISA","2026-07-30T04:01:05.365671+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":136,"eventType":137,"eventTime":138,"details":139,"label":140,"color":141},"a99baf3d-a1fc-404d-8b8c-73b76376aacb","NEW_NVD","2026-07-30T04:01:19.868309+00:00","New CVE added to NVD","Published to NVD","blue",{"id":143,"eventType":144,"eventTime":145,"details":146,"label":147,"color":134},"2d25f670-7036-4550-a09f-1bfebeceab2f","HIGH_EPSS_DELTA","2026-09-25T04:05:43.505322+00:00","Daily EPSS score increased by 0.239 on 2026-07-31","EPSS Score Increased",{"lastModified":11,"cacheTime":149,"version":150},1793212668959,"2.0",{"score":152,"band":153,"action":154,"scoredAt":155},74,"High","Emergency patch","2026-10-28T07:17:53.713026+00:00"]