NCSC-2026-0271 [1.00] [M/H] Vulnerability fixed in Cisco Secure Firewall Management Center

unknownCVE-2026-20316

Cisco has fixed a vulnerability in Cisco Secure Firewall Management Center. The vulnerability is located in the web interface of Cisco Secure Firewall Management Center and concerns a hard-coded, static password for a low-privileged account. This allows unauthenticated external attackers to gain access without credentials. This access can lead to the exposure of sensitive data stored or managed by the system. In combination with other vulnerabilities, this access can lead to privilege escalation. The U.S. CISA has placed the vulnerability on the Known Exploited Vulnerabilities list, indicating that there has been exploitation of this vulnerability within the U.S. Federal Government. It is good practice to *not* have web interfaces of management environments publicly accessible, but to support them in a separate management environment.

CSIRTS triage

vendor: Cisco product: Secure Firewall Management Center Authentication bypass Information disclosure Privilege escalation

What: The vulnerability involves a hard-coded, static password for a low-privileged account in the web interface, allowing unauthenticated access.
Who is affected: Unauthenticated external attackers can exploit this vulnerability in Cisco Secure Firewall Management Center.
Urgency: Remediation is urgent as the vulnerability has been exploited within the U.S. Federal Government, indicating a high risk.
Action: It is recommended to apply the latest patches and restrict access to the management interface.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Secure Firewall Management Center

Get an email when a new Secure Firewall Management Center advisory drops — max one per day, one-click unsubscribe.

Details

Source: NCSC-NL Advisories (NL · national-cert · site)
Severity: unknown
Published: 2026-07-30
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0271

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-203160.79% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 53% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-20316	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

highexploitedCisco Secure Firewall Management Center Software Static Credential Vulnerabilitycisco-psirt
unknownexploitedCisco security advisory (AV26-757)cccs
medium[NEW] [medium] Cisco Secure Firewall Management Center: Vulnerability allows information disclosurecert-bund
unknownCisco Secure Firewall Management Center Software Information Disclosure Vulnerabilityhkcert
unknownexploitedVulnerability in Cisco Firewall Management Center (July 30, 2026)cert-fr-avis
mediumexploitedCVE-2026-20316: A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software…nvd
highexploitedCISA Adds One Known Exploited Vulnerability to Catalogcisa
criticalexploitedCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerabilitycisa-kev