60
60
ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability
ZDI discloses CVE-2026-20316, a 9.8-rated unauthenticated authentication bypass in Cisco Secure Firewall Management Center login.cgi.
ZDI-26-533 describes an authentication bypass vulnerability in Cisco Secure Firewall Management Center's login.cgi that allows remote attackers to bypass authentication without any credentials. ZDI assigned a CVSS score of 9.8, and the flaw is tracked as CVE-2026-20316. As a central management plane for firewall infrastructure, compromise could enable broad policy changes.
60
60
60
55
60
Cisco drops security fixes for Smart Software Manager, security appliances
60
60
60
47
60
Cisco FMC static credentials exploited by attackers (CVE-2026-20316)
60
60
55
30
30
Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution
60
55
Cisco fixed tens of vulnerabilities, including an actively exploited one
60
Cisco patches critical flaws in VPN routers and firewalls
60
55
60
60
60
42
60
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs
60
Exploited: Cisco, SharePoint, Chrome vulnerabilities
60
Cisco Fixes Critical Privilege Escalation Flaw in Meeting Management (CVSS 9.9)
60
Admins, patch your Cisco enterprise security solutions! (CVE-2023-20032)
60
57
60
60
60
Cisco warns of SD-WAN Manager exploitation, fixes 48 firewall vulnerabilities
60
Vulnerability Spotlight: Netgear Orbi router vulnerable to arbitrary command execution
60
60
60
60