Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware
Three threat groups, including Qilin ransomware operators, exploit critical Cisco FMC flaws CVE-2026-20079 and CVE-2026-20316 for root access, credential theft, and ransomware.
90
Malware
Qilin ransomware
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 10, 2026
- Last mentionedSep 11, 2026
Timeline
3 articles · newest firstCisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Three threat clusters including a Sandworm-linked group and Qilin ransomware operators exploit Cisco FMC flaws CVE-2026-20079 and CVE-2026-20316.
84
Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers
Cisco Talos confirms ransomware and state-sponsored groups exploited CVE-2026-20079 and CVE-2026-20316 in Secure Firewall Management Center, deploying Qilin ransomware and Cyclops Blink.
82
Related CVEs
by mentions- CVE-2026-2007988%10.0Authentication bypass to root access in Cisco Secure Firewall Management Center
- CVE-2026-2031635%5.3Hard-Coded Password Vulnerability in Cisco Secure Firewall Management Center
Appears with
- Cyclops Blinkmalware · 3
- Ciscovendor · 3
- UAT-12197threat actor · 3
- Sandwormthreat actor · 3
- UAT-11823threat actor · 3
- UAT-11988threat actor · 3
- Cisco Talosorganization · 3
- Cyclops Blinkproduct · 2
- CISAorganization · 2
- Cisco Secure Firewall Management Centerproduct · 2
- Qilinthreat actor · 2
- CISAvendor · 1
- Qilin ransomwareproduct · 1
- Secure Firewall Management Centerproduct · 1
- Ciscoorganization · 1
- Windowsproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.