Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard
Cisco patches dozens of critical flaws in FMC, ISE and Nexus Dashboard, including ISE bugs and an authentication bypass already exploited in the wild.
Cisco released patches for dozens of critical-severity CVEs in Secure Firewall Management Center, Identity Services Engine and Nexus Dashboard. ISE updates cover 20 CVEs including 12 critical ones; three publicly disclosed flaws (CVE-2026-20282, CVE-2026-20283, CVE-2026-20284) enable SQL injection, data tampering and command execution but require administrative access. FMC patches fix 18 CVEs, eight critical, several shared with ASA and FTD, where CVE-2026-20079 and CVE-2026-20316 have been exploited since August. Cisco also warned of a critical-severity ISE authentication bypass exploited in the wild as a zero-day.
- ISE update patches 20 CVEs including 12 critical, with three already publicly disclosed.
- FMC update resolves 18 CVEs, eight critical, some also affecting ASA and FTD.
- CVE-2026-20079 and CVE-2026-20316 in the ASA/FTD class have been exploited since August.
- Cisco separately warns of an ISE authentication bypass exploited in the wild as a zero-day.
- Nexus Dashboard patches cover six critical- and high-severity injection and bypass flaws.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20079 | Authentication bypass to root access in Cisco Secure Firewall Management Center | 10.0 | 89% | KEVPoC ×2 | KEV |
CVE-2026-20284+2 related CVEs | Authenticated SQL Injection in Cisco ISE SXP REST API | 9.1 group max | — | ||
| CVE-2026-20316 | Hard-Coded Password Vulnerability in Cisco Secure Firewall Management Center | 5.3 | 35% | KEVRansomware | KEV |
| CVE-2026-20332 | Improper Access Control in Cisco ASA, FTD, and Firewall Management Center | 9.9 | — |
From the original article
2 min read at securityweek.comThe vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution. The post Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.