CVE-2026-20316
MEDIUM 5.3 KNOWN EXPLOITEDA vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced. Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.
Confirmed exploited in the wild — in CISA KEV since 2026-07-29. Patch or mitigate now.
Exploitation likelihood
0.8%chance of exploitation in 30 days · 53rd percentile
Impact if exploited
5.3CVSS 3.1 · MEDIUM
- ConfidentialityLow
- IntegrityNone
- AvailabilityNone
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ✓Privileges: No account or privileges required
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept & exploit code
- github-search Search GitHub for public PoC repos
Test against your own equipment
curl -s https://vulnpedia.com/cve/CVE-2026-20316/poc.jsonMachine-readable PoC index for this CVE (for automation).Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-20316/poc.json
Affected
Vendors Cisco
Products Cisco Secure Firewall Management Center (Fmc) Secure Firewall Management Center
Weakness (CWE)
- CWE-259: Use of Hard-coded Password
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Known Affected Software Configurations
| Vendor | Product | Version range |
|---|---|---|
| Cisco | Secure Firewall Management Center | ≥ 7.0.0 and ≤ 7.0.9 |
| Cisco | Secure Firewall Management Center | ≥ 7.2.0 and ≤ 7.2.11 |
| Cisco | Secure Firewall Management Center | ≥ 7.3.0 and ≤ 7.3.1.2 |
| Cisco | Secure Firewall Management Center | ≥ 7.4.0 and ≤ 7.4.7 |
| Cisco | Secure Firewall Management Center | ≥ 7.6.0 and ≤ 7.6.5 |
| Cisco | Secure Firewall Management Center | ≥ 7.7.0 and ≤ 7.7.12 |
| Cisco | Secure Firewall Management Center | ≥ 10.0.0 and ≤ 10.0.1 |
All CVSS metrics
- MEDIUM 5.3 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - MEDIUM 5.3 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N