Skip to content
VulniPulse
Sign in
Advisory severityMedium5.3Vendor: HighCisco Exploited CISA KEV

Medium [CVE-2026-20316] Cisco Secure Firewall Management Center Software Static Credential Vulnerability

This medium-severity Cisco advisory covers CVE-2026-20316 affecting Secure Firewall Management Center (FMC) Appliances.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

cisco-sa-fmc-static-cred-BET3Cjh Source published Source updated

VulniPulse record published Record updated

CVE-2026-20316
Affected products & platforms
CiscoFirewallASA / Firepower
Open source advisory

Get an email when Cisco publishes the next one.

VulniPulse checks Cisco's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.

Start your free month

Summary

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.

This vulnerability is due to the presence of static user credentials for a low-privileged account. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user.

Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.

Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories.

Affected product named by the advisory: Secure Firewall Management Center (FMC) Appliances.

CISA Known Exploited Vulnerability

Listed:
Jul 29, 2026 · federal remediation due Aug 1, 2026
Required action:
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Ransomware use:
Known ransomware campaign use, according to CISA

KEV is a prioritization signal from CISA. Remediation detail comes from the vendor advisory.

Affected versions
  • Scope: This vulnerability affects Cisco Secure FMC Software, regardless of device configuration.
  • Release 7.0 and earlier (first fixed: 7.0.10)
  • Release 7.2 (first fixed: 7.2.12)
  • Release 7.4 (first fixed: 7.4.8)
  • Release 7.6 (first fixed: 7.6.6)
  • Release 7.7 (first fixed: 7.7.13)
  • Release 10.0 (first fixed: 10.0.2)
  • Release 10.1 (first fixed: 10.1.0)

Official advisory · high-confidence parse· fetched 27 days ago·verify at source

Fixed versions
  • 7.0.10
  • 7.2.12
  • 7.4.8
  • 7.6.6
  • 7.7.13
  • 10.0.2
  • 10.1.0

Official advisory · high-confidence parse· fetched 27 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
  • Release 7.0 and earlier: upgrade to 7.0.10.
  • Release 7.2: upgrade to 7.2.12.
  • Release 7.4: upgrade to 7.4.8.
  • Release 7.6: upgrade to 7.6.6.
  • Release 7.7: upgrade to 7.7.13.
  • Release 10.0: upgrade to 10.0.2.
  • Release 10.1: upgrade to 10.1.0.
Workaround status
  • There are no workarounds that address this vulnerability.

Official advisory · high-confidence parse· fetched 27 days ago·verify at source

More Cisco advisories

All Cisco advisories

Android app · Google Play

Monitor future Cisco CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Get CVE alertsSee app features

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.