CVE-2026-20316
Actively exploited. CVE-2026-20316 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2026-07-29) — exploitation has been observed in the wild, and US federal agencies are required to remediate it under BOD 22-01. Treat patching as urgent.
Serial number: AV26-757 Date: July 29, 2026 As of July 29, 2026, Cisco is affected by a vulnerability in the following product: Cisco Secure Firewall Management Center (FMC) Prior to 7.0.9.1 Prior to 7.2.11.1 Prior to 7.4.7.1 Prior to 7.6.5.1 Prior to 7.7.12.1 Prior to 10.0.1.1 Cisco has indicated that CVE-2026-20316 is being exploited. On July 29, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20316 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Cisco Security Advisories Cisco Secure Firewall Management Center Software Static Credential Vulnerability CISA KEV : CVE-2026-20316
CSIRTS triage
- What
- There is a vulnerability that allows for remote code execution and a breach of security policy.
- Who is affected
- Deployments of Cisco Secure Firewall Management Center prior to the specified versions are affected.
- Urgency
- Remediation is urgent as the vulnerability is actively exploited.
- Action
- Users should apply necessary updates as they become available.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-20316
Get an email if CVE-2026-20316 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Exploitation confirmedAlready exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 53% of all EPSS-scored CVEs.
Advisory coverage (9)
- highexploitedCisco Secure Firewall Management Center Software Static Credential Vulnerabilitycisco-psirt · 2026-07-31
- unknownexploitedCisco security advisory (AV26-757)cccs · 2026-07-30
- medium[NEW] [medium] Cisco Secure Firewall Management Center: Vulnerability allows information disclosurecert-bund · 2026-07-30
- unknownNCSC-2026-0271 [1.00] [M/H] Vulnerability fixed in Cisco Secure Firewall Management Centerncsc-nl · 2026-07-30
- unknownCisco Secure Firewall Management Center Software Information Disclosure Vulnerabilityhkcert · 2026-07-30
- unknownexploitedVulnerability in Cisco Firewall Management Center (July 30, 2026)cert-fr-avis · 2026-07-30
- mediumexploitedCVE-2026-20316: A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software…nvd · 2026-07-29
- highexploitedCISA Adds One Known Exploited Vulnerability to Catalogcisa · 2026-07-29
- criticalexploitedCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerabilitycisa-kev · 2026-07-29
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-20316)