Cisco FMC CVE-2026-20079 Actively Exploited
Cisco confirms active exploitation of CVE-2026-20079, a maximum-severity authentication bypass in Secure Firewall Management Center.
Cisco has confirmed that CVE-2026-20079, a critical authentication bypass in Cisco Secure Firewall Management Center (FMC), is being actively exploited in the wild. The vulnerability carries a maximum CVSS severity, and defenders are urged to treat it as an urgent patch priority. FMC centrally manages Cisco Secure Firewall deployments, so exposure across enterprise environments is likely.
- CVE-2026-20079 is a critical authentication bypass in Cisco FMC
- Cisco confirmed the flaw is being actively exploited
- FMC is widely deployed to centrally manage Cisco Secure Firewalls
- CVEs
- CVE-2026-20079
- Vendors
- Cisco
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20079 | Authentication bypass to root access in Cisco Secure Firewall Management Center | 10.0 | 89% | KEVPoC ×2 | KEV |
From the original article

Cisco FMC CVE-2026-20079 Actively Exploited Cisco has confirmed active exploitation of CVE-2026-20079 , a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC) with a maximum CVSS
By ameer · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.