CISA Adds Critical Cisco Secure Firewall Management Center Vulnerability (CVE-2026-20079) to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical authentication-bypass vulnerability in Cisco Secure Firewall Management Center (FMC), tracked as CVE-2026-20079, to its Known Exploited Vulnerabilities Catalog. This flaw allows a remote, unauthenticated attacker to execute malicious scripts and obtain root access. CISA has set a September 12 remediation deadline for federal agencies, as active exploitation of this vulnerability has been flagged by Cisco and CISA, with reports of exploitation by advanced threat actors.

Context

CISA's Known Exploited Vulnerabilities Catalog identifies security flaws that pose immediate threats to federal agencies and critical infrastructure. CVE-2026-20079 is classified as critical due to its potential for exploitation by advanced threat actors. Cisco has acknowledged the risk and is urging users to take action.

Why it matters

The addition of CVE-2026-20079 to CISA's catalog highlights a significant security risk for organizations using Cisco Secure Firewall Management Center. This vulnerability could allow attackers to gain unauthorized access and execute harmful actions. Prompt remediation is crucial to protect sensitive data and maintain network integrity.

Implications

If not addressed, the vulnerability could lead to significant data breaches and operational disruptions for affected organizations. Federal agencies are particularly at risk, but private sector entities using the software may also face threats. The incident underscores the importance of timely cybersecurity measures and vigilance against emerging threats.

What to watch

Organizations using Cisco Secure Firewall Management Center should prioritize applying the necessary patches before the September 12 deadline. Monitoring for any signs of exploitation will be essential in the coming weeks. CISA may provide further updates or guidance as the situation evolves.