CVE Listesine Dön
CVE-2026-20079 CISA KEV · Aktif SömürülüyorOtomatik saldırıya uygun · CISA

Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

CVSS Skor

10.0

EPSS İhtimal

%88.2

Risk Skoru

17.6

Yayın

7 ay önce

Overview (Genel Bakış)Public Exploits (2)Newsroom (Haberler)Vulnerability Timeline
Geçici azaltım mevcut

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2026-20079 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.  This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device. 

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2026-20079 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1ciscoCisco Secure Firewall Management Center (FMC) İncele
2ciscosecure firewall management center İncele
3ciscosecure firewall management center İncele
4ciscosecure firewall management center İncele
5ciscosecure firewall management center İncele
6ciscosecure firewall management center İncele
7ciscosecure firewall management center İncele
8ciscosecure firewall management center İncele
9ciscosecure firewall management center İncele
10ciscosecure firewall management center İncele
11ciscosecure firewall management center İncele
12ciscosecure firewall management center İncele
13ciscosecure firewall management center İncele
14ciscosecure firewall management center İncele
15ciscosecure firewall management center İncele
16ciscosecure firewall management center İncele
17ciscosecure firewall management center İncele
18ciscosecure firewall management center İncele
19ciscosecure firewall management center İncele
20ciscosecure firewall management center İncele
21ciscosecure firewall management center İncele
22ciscosecure firewall management center İncele
23ciscosecure firewall management center İncele
24ciscosecure firewall management center İncele
25ciscosecure firewall management center İncele
26ciscosecure firewall management center İncele
27ciscosecure firewall management center İncele
28ciscosecure firewall management center İncele
29ciscosecure firewall management center İncele
30ciscosecure firewall management center İncele
31ciscosecure firewall management center İncele
32ciscosecure firewall management center İncele
33ciscosecure firewall management center İncele
34ciscosecure firewall management center İncele
35ciscosecure firewall management center İncele
36ciscosecure firewall management center İncele
37ciscosecure firewall management center İncele
38ciscosecure firewall management center İncele
39ciscosecure firewall management center İncele
40ciscosecure firewall management center İncele
41ciscosecure firewall management center İncele
42ciscosecure firewall management center İncele
43ciscosecure firewall management center İncele
44ciscosecure firewall management center İncele
45ciscosecure firewall management center İncele
46ciscosecure firewall management center İncele
47ciscosecure firewall management center İncele
48ciscosecure firewall management center İncele
49ciscosecure firewall management center İncele
50ciscosecure firewall management center İncele
51ciscosecure firewall management center İncele
52ciscosecure firewall management center İncele
53ciscosecure firewall management center İncele
54ciscosecure firewall management center İncele
55ciscosecure firewall management center İncele
56ciscosecure firewall management center İncele
57ciscosecure firewall management center İncele
58ciscosecure firewall management center İncele
59ciscosecure firewall management center İncele
60ciscosecure firewall management center İncele
61ciscosecure firewall management center İncele
62ciscosecure firewall management center İncele
63ciscosecure firewall management center İncele
64ciscosecure firewall management center İncele
65ciscosecure firewall management center İncele
66ciscosecure firewall management center İncele
67ciscosecure firewall management center İncele
68ciscosecure firewall management center İncele
69ciscosecure firewall management center İncele
70ciscosecure firewall management center İncele
71ciscosecure firewall management center İncele
72ciscosecure firewall management center İncele
73ciscosecure firewall management center İncele
Total Affected Vendor: 1|Products: 73

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Red Hat bu CVE için henüz bir CSAF/VEX etki kaydı yayımlamamış. Bu durum “etkilenmiyor” anlamına gelmez.

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
10.0CVSS V31CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HNVD
10.0CVSS V3_1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCVE CNA

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Geçici çözüm

Resmî yama doğrulanamadı; geçici azaltım veya workaround mevcut.

canonical

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Yama doğrulanana kadar üretici bültenini izleyin; bilinmeyen durumu “yama yok” olarak yorumlamayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

CVE-2026-20079 için veritabanında 2 public PoC/exploit kaynağı bulunuyor. Doğrudan kaynak bağlantıları için Public Exploits sekmesini açın.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-20079 is associated with the following CWEs:

CWE-288: Common Weakness Enumeration Entry CWE-288

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-20079 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
YetkiGerekmiyor
KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

cisco-sa-onprem-fmc-authbypass-5JPp45V2vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20079nvdCISA Known Exploited Vulnerabilities Catalogkev

CVSS Vektör Radar Grafiği

10.0 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack VectorNetwork (Ağ)
Attack ComplexityLow (Düşük)
Privileges RequiredNone (Gerekmiyor)
User InteractionNone (Gerekmiyor)
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)High (Yüksek)

Geçici çözüm

Resmî yama doğrulanamadı; geçici azaltım veya workaround mevcut.

Üreticiyi takip et

C
cisco logo
cisco

Zafiyet Türü (CWE & CAPEC)

CWE-288

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-20079"
CVE-2026-20079 · Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability · DayBreach