CVE Details

CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Published: 2026-09-09 CVSS: 10 CRITICAL Product: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Due Date: 2026-09-12

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.

GitHub PoC

Warning: GitHub PoC repositories are unverified. Some may be fake or contain malware. Use caution and review code before running anything.
  • CyberAuth/CVE-2026-20079 • ⭐ 4 • 2026-08-17 • Conf: 95.0%
  • Python proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center.

FIRST EPSS

EPSS estimates the probability of exploitation in the next 30 days. Higher values indicate higher likelihood of real-world exploitation.

Timeline

CVE Stalker KEV MITRE GitHub FIRST (EPSS)

MITRE

CVSS

  • Score: 10
  • Severity: CRITICAL
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

  • Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

Show Raw Data
Key Remaining Key Value
dataType CVE_RECORD
dataVersion 5.2
cveMetadata > cveId CVE-2026-20079
cveMetadata > assignerOrgId d1c1063e-7a18-46af-9102-31f8928bc633
cveMetadata > state PUBLISHED
cveMetadata > assignerShortName cisco
cveMetadata > dateReserved 2025-10-08T11:59:15.363Z
cveMetadata > datePublished 2026-03-04T17:17:35.838Z
cveMetadata > dateUpdated 2026-09-09T16:07:19.101Z
containers > cna > title Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
containers > cna > metrics > 0 > format cvssV3_1
containers > cna > metrics > 0 > cvssV3_1 > version 3.1
containers > cna > metrics > 0 > cvssV3_1 > vectorString CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
containers > cna > metrics > 0 > cvssV3_1 > baseScore 10
containers > cna > metrics > 0 > cvssV3_1 > baseSeverity CRITICAL
containers > cna > metrics > 0 > cvssV3_1 > attackVector NETWORK
containers > cna > metrics > 0 > cvssV3_1 > attackComplexity LOW
containers > cna > metrics > 0 > cvssV3_1 > privilegesRequired NONE
containers > cna > metrics > 0 > cvssV3_1 > userInteraction NONE
containers > cna > metrics > 0 > cvssV3_1 > scope CHANGED
containers > cna > metrics > 0 > cvssV3_1 > confidentialityImpact HIGH
containers > cna > metrics > 0 > cvssV3_1 > integrityImpact HIGH
containers > cna > metrics > 0 > cvssV3_1 > availabilityImpact HIGH
containers > cna > descriptions > 0 > lang en
containers > cna > descriptions > 0 > value A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.  This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device. 
containers > cna > references > 0 > url https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2
containers > cna > references > 0 > name cisco-sa-onprem-fmc-authbypass-5JPp45V2
containers > cna > exploits > 0 > lang en
containers > cna > exploits > 0 > value In August 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.
containers > cna > source > advisory cisco-sa-onprem-fmc-authbypass-5JPp45V2
containers > cna > source > discovery EXTERNAL
containers > cna > source > defects > 0 CSCwr96008
containers > cna > problemTypes > 0 > descriptions > 0 > lang en
containers > cna > problemTypes > 0 > descriptions > 0 > description Authentication Bypass Using an Alternate Path or Channel
containers > cna > problemTypes > 0 > descriptions > 0 > type cwe
containers > cna > problemTypes > 0 > descriptions > 0 > cweId CWE-288
containers > cna > affected > 0 > vendor Cisco
containers > cna > affected > 0 > product Cisco Secure Firewall Management Center (FMC)
containers > cna > affected > 0 > versions > 0 > version 7.0.0
containers > cna > affected > 0 > versions > 0 > status affected
containers > cna > affected > 0 > versions > 1 > version 7.0.0.1
containers > cna > affected > 0 > versions > 1 > status affected
containers > cna > affected > 0 > versions > 2 > version 7.0.1
containers > cna > affected > 0 > versions > 2 > status affected
containers > cna > affected > 0 > versions > 3 > version 7.1.0
containers > cna > affected > 0 > versions > 3 > status affected
containers > cna > affected > 0 > versions > 4 > version 7.0.1.1
containers > cna > affected > 0 > versions > 4 > status affected
containers > cna > affected > 0 > versions > 5 > version 7.1.0.1
containers > cna > affected > 0 > versions > 5 > status affected
containers > cna > affected > 0 > versions > 6 > version 7.0.2
containers > cna > affected > 0 > versions > 6 > status affected
containers > cna > affected > 0 > versions > 7 > version 7.2.0
containers > cna > affected > 0 > versions > 7 > status affected
containers > cna > affected > 0 > versions > 8 > version 7.0.2.1
containers > cna > affected > 0 > versions > 8 > status affected
containers > cna > affected > 0 > versions > 9 > version 7.0.3
containers > cna > affected > 0 > versions > 9 > status affected
containers > cna > affected > 0 > versions > 10 > version 7.1.0.2
containers > cna > affected > 0 > versions > 10 > status affected
containers > cna > affected > 0 > versions > 11 > version 7.2.0.1
containers > cna > affected > 0 > versions > 11 > status affected
containers > cna > affected > 0 > versions > 12 > version 7.0.4
containers > cna > affected > 0 > versions > 12 > status affected
containers > cna > affected > 0 > versions > 13 > version 7.2.1
containers > cna > affected > 0 > versions > 13 > status affected
containers > cna > affected > 0 > versions > 14 > version 7.0.5
containers > cna > affected > 0 > versions > 14 > status affected
containers > cna > affected > 0 > versions > 15 > version 7.3.0
containers > cna > affected > 0 > versions > 15 > status affected
containers > cna > affected > 0 > versions > 16 > version 7.2.2
containers > cna > affected > 0 > versions > 16 > status affected
containers > cna > affected > 0 > versions > 17 > version 7.3.1
containers > cna > affected > 0 > versions > 17 > status affected
containers > cna > affected > 0 > versions > 18 > version 7.2.3
containers > cna > affected > 0 > versions > 18 > status affected
containers > cna > affected > 0 > versions > 19 > version 7.1.0.3
containers > cna > affected > 0 > versions > 19 > status affected
containers > cna > affected > 0 > versions > 20 > version 7.2.3.1
containers > cna > affected > 0 > versions > 20 > status affected
containers > cna > affected > 0 > versions > 21 > version 7.2.4
containers > cna > affected > 0 > versions > 21 > status affected
containers > cna > affected > 0 > versions > 22 > version 7.0.6
containers > cna > affected > 0 > versions > 22 > status affected
containers > cna > affected > 0 > versions > 23 > version 7.2.4.1
containers > cna > affected > 0 > versions > 23 > status affected
containers > cna > affected > 0 > versions > 24 > version 7.2.5
containers > cna > affected > 0 > versions > 24 > status affected
containers > cna > affected > 0 > versions > 25 > version 7.3.1.1
containers > cna > affected > 0 > versions > 25 > status affected
containers > cna > affected > 0 > versions > 26 > version 7.4.0
containers > cna > affected > 0 > versions > 26 > status affected
containers > cna > affected > 0 > versions > 27 > version 7.0.6.1
containers > cna > affected > 0 > versions > 27 > status affected
containers > cna > affected > 0 > versions > 28 > version 7.2.5.1
containers > cna > affected > 0 > versions > 28 > status affected
containers > cna > affected > 0 > versions > 29 > version 7.4.1
containers > cna > affected > 0 > versions > 29 > status affected
containers > cna > affected > 0 > versions > 30 > version 7.2.6
containers > cna > affected > 0 > versions > 30 > status affected
containers > cna > affected > 0 > versions > 31 > version 7.4.1.1
containers > cna > affected > 0 > versions > 31 > status affected
containers > cna > affected > 0 > versions > 32 > version 7.0.6.2
containers > cna > affected > 0 > versions > 32 > status affected
containers > cna > affected > 0 > versions > 33 > version 7.2.7
containers > cna > affected > 0 > versions > 33 > status affected
containers > cna > affected > 0 > versions > 34 > version 7.2.5.2
containers > cna > affected > 0 > versions > 34 > status affected
containers > cna > affected > 0 > versions > 35 > version 7.3.1.2
containers > cna > affected > 0 > versions > 35 > status affected
containers > cna > affected > 0 > versions > 36 > version 7.2.8
containers > cna > affected > 0 > versions > 36 > status affected
containers > cna > affected > 0 > versions > 37 > version 7.6.0
containers > cna > affected > 0 > versions > 37 > status affected
containers > cna > affected > 0 > versions > 38 > version 7.4.2
containers > cna > affected > 0 > versions > 38 > status affected
containers > cna > affected > 0 > versions > 39 > version 7.2.8.1
containers > cna > affected > 0 > versions > 39 > status affected
containers > cna > affected > 0 > versions > 40 > version 7.0.6.3
containers > cna > affected > 0 > versions > 40 > status affected
containers > cna > affected > 0 > versions > 41 > version 7.4.2.1
containers > cna > affected > 0 > versions > 41 > status affected
containers > cna > affected > 0 > versions > 42 > version 7.2.9
containers > cna > affected > 0 > versions > 42 > status affected
containers > cna > affected > 0 > versions > 43 > version 7.0.7
containers > cna > affected > 0 > versions > 43 > status affected
containers > cna > affected > 0 > versions > 44 > version 7.7.0
containers > cna > affected > 0 > versions > 44 > status affected
containers > cna > affected > 0 > versions > 45 > version 7.4.2.2
containers > cna > affected > 0 > versions > 45 > status affected
containers > cna > affected > 0 > versions > 46 > version 7.2.10
containers > cna > affected > 0 > versions > 46 > status affected
containers > cna > affected > 0 > versions > 47 > version 7.6.1
containers > cna > affected > 0 > versions > 47 > status affected
containers > cna > affected > 0 > versions > 48 > version 7.4.2.3
containers > cna > affected > 0 > versions > 48 > status affected
containers > cna > affected > 0 > versions > 49 > version 7.0.8
containers > cna > affected > 0 > versions > 49 > status affected
containers > cna > affected > 0 > versions > 50 > version 7.6.2
containers > cna > affected > 0 > versions > 50 > status affected
containers > cna > affected > 0 > versions > 51 > version 7.7.10
containers > cna > affected > 0 > versions > 51 > status affected
containers > cna > affected > 0 > versions > 52 > version 7.2.10.1
containers > cna > affected > 0 > versions > 52 > status affected
containers > cna > affected > 0 > versions > 53 > version 7.0.8.1
containers > cna > affected > 0 > versions > 53 > status affected
containers > cna > affected > 0 > versions > 54 > version 7.6.2.1
containers > cna > affected > 0 > versions > 54 > status affected
containers > cna > affected > 0 > versions > 55 > version 7.2.10.2
containers > cna > affected > 0 > versions > 55 > status affected
containers > cna > affected > 0 > versions > 56 > version 7.7.10.1
containers > cna > affected > 0 > versions > 56 > status affected
containers > cna > affected > 0 > versions > 57 > version 7.4.2.4
containers > cna > affected > 0 > versions > 57 > status affected
containers > cna > affected > 0 > versions > 58 > version 7.4.3
containers > cna > affected > 0 > versions > 58 > status affected
containers > cna > affected > 0 > versions > 59 > version 7.6.3
containers > cna > affected > 0 > versions > 59 > status affected
containers > cna > affected > 0 > versions > 60 > version 7.7.11
containers > cna > affected > 0 > versions > 60 > status affected
containers > cna > affected > 0 > versions > 61 > version 7.6.4
containers > cna > affected > 0 > versions > 61 > status affected
containers > cna > affected > 0 > versions > 62 > version 10.0.0
containers > cna > affected > 0 > versions > 62 > status affected
containers > cna > affected > 0 > versions > 63 > version 7.4.4
containers > cna > affected > 0 > versions > 63 > status affected
containers > cna > affected > 0 > versions > 64 > version 7.4.5
containers > cna > affected > 0 > versions > 64 > status affected
containers > cna > affected > 0 > versions > 65 > version 7.0.9
containers > cna > affected > 0 > versions > 65 > status affected
containers > cna > affected > 0 > versions > 66 > version 7.2.11
containers > cna > affected > 0 > versions > 66 > status affected
containers > cna > affected > 0 > versions > 67 > version 7.7.12
containers > cna > affected > 0 > versions > 67 > status affected
containers > cna > affected > 0 > versions > 68 > version 7.6.5
containers > cna > affected > 0 > versions > 68 > status affected
containers > cna > affected > 0 > versions > 69 > version 7.4.6
containers > cna > affected > 0 > versions > 69 > status affected
containers > cna > affected > 0 > versions > 70 > version 10.0.1
containers > cna > affected > 0 > versions > 70 > status affected
containers > cna > affected > 0 > versions > 71 > version 7.4.7
containers > cna > affected > 0 > versions > 71 > status affected
containers > cna > affected > 0 > defaultStatus unknown
containers > cna > providerMetadata > orgId d1c1063e-7a18-46af-9102-31f8928bc633
containers > cna > providerMetadata > shortName cisco
containers > cna > providerMetadata > dateUpdated 2026-09-09T16:07:19.101Z
containers > adp > 0 > metrics > 0 > other > type ssvc
containers > adp > 0 > metrics > 0 > other > content > timestamp 2026-03-05T04:55:41.152638Z
containers > adp > 0 > metrics > 0 > other > content > id CVE-2026-20079
containers > adp > 0 > metrics > 0 > other > content > options > 0 > Exploitation none
containers > adp > 0 > metrics > 0 > other > content > options > 1 > Automatable yes
containers > adp > 0 > metrics > 0 > other > content > options > 2 > Technical Impact total
containers > adp > 0 > metrics > 0 > other > content > role CISA Coordinator
containers > adp > 0 > metrics > 0 > other > content > version 2.0.3
containers > adp > 0 > title CISA ADP Vulnrichment
containers > adp > 0 > providerMetadata > orgId 134c704f-9b21-4f2e-91b3-4a467353bcc0
containers > adp > 0 > providerMetadata > shortName CISA-ADP
containers > adp > 0 > providerMetadata > dateUpdated 2026-03-05T14:06:33.865Z
containers > adp > 1 > title CVE Program Container
containers > adp > 1 > references > 0 > url http://seclists.org/fulldisclosure/2026/Aug/80
containers > adp > 1 > providerMetadata > orgId af854a3a-2127-422b-91ae-364da2661108
containers > adp > 1 > providerMetadata > shortName CVE
containers > adp > 1 > providerMetadata > dateUpdated 2026-08-26T16:28:33.946Z