HIGHVulnerability
Verified
Global

CISA KEV: Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.

Analysis

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-09. Remediation due: 2026-09-12.

Indicators of Compromise (1)

CVE (1)
CVE-2026-20079
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 9, 2026. Verified by: CISA.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-76501 — A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administratio...

A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. This vulnerability is due to improper input validation of IP traffic when the NGOAM and SR

CVE-2026-76501
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-76500 — As part of Cisco's ongoing commitment to proactive security and product quality,...

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76500 are related to

CVE-2026-76500
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-76499 — As part of Cisco's ongoing commitment to proactive security and product quality,...

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76499 are related to imprope

CVE-2026-76499
NIST NVD