CVE-2026-20079: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.
- Vendor
- Cisco
- Product
- Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- Vulnerability
- Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Date added
- Sep 9, 2026
- CISA due date (U.S. federal agencies)
- Sep 12, 2026
- Known ransomware campaign use
- Unknown
- Weakness (CWE)
- CWE-288
References
This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.
Last updated: · Catalog version 2026.10.02