Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware
Three threat groups, including Qilin ransomware operators, exploit critical Cisco FMC flaws CVE-2026-20079 and CVE-2026-20316 for root access, credential theft, and ransomware.
90
Product
Cyclops Blink
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 10, 2026
- Last mentionedSep 11, 2026
Timeline
3 articles · newest firstCisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Three threat clusters including a Sandworm-linked group and Qilin ransomware operators exploit Cisco FMC flaws CVE-2026-20079 and CVE-2026-20316.
84
Organizations Warned of Cisco Secure FMC Exploitation
Cisco and CISA warn that critical FMC authentication bypass CVE-2026-20079 is actively exploited; CISA added it to the KEV catalog with a September 12 deadline.
88
Related CVEs
by mentions- CVE-2026-2007988%10.0Authentication bypass to root access in Cisco Secure Firewall Management Center
- CVE-2026-2031635%5.3Hard-Coded Password Vulnerability in Cisco Secure Firewall Management Center
- CVE-2026-2013143%10.0Unauthenticated Java Deserialization RCE in Cisco FMC and SCC
Appears with
- Ciscovendor · 3
- Cisco Talosorganization · 3
- Cyclops Blinkmalware · 3
- UAT-12197threat actor · 3
- Sandwormthreat actor · 3
- UAT-11823threat actor · 3
- Cisco Secure Firewall Management Centerproduct · 3
- UAT-11988threat actor · 3
- Qilin ransomwaremalware · 2
- CISAorganization · 2
- CISAvendor · 2
- Qilinthreat actor · 2
- Ciscoorganization · 1
- Qilin ransomwareproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.