60
Search: “Secure Firewall Management Center”
241 stories
ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability
ZDI discloses CVE-2026-20316, a 9.8-rated unauthenticated authentication bypass in Cisco Secure Firewall Management Center login.cgi.
ZDI-26-533 describes an authentication bypass vulnerability in Cisco Secure Firewall Management Center's login.cgi that allows remote attackers to bypass authentication without any credentials. ZDI assigned a CVSS score of 9.8, and the flaw is tracked as CVE-2026-20316. As a central management plane for firewall infrastructure, compromise could enable broad policy changes.
60
60
60
60
60
Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution
60
Cisco fixed tens of vulnerabilities, including an actively exploited one
60
60
Cisco IMC auth bypass vulnerability allows attackers to alter user passwords (CVE-2026-20093)
60
Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack
60
60
Cisco warns of SD-WAN Manager exploitation, fixes 48 firewall vulnerabilities
60
60
Exploited: Cisco, SharePoint, Chrome vulnerabilities
60
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs
60
60
60
60
60
60
60
Vulnerability Spotlight: Specially crafted files could lead to denial of service, information disclosure in OpenImageIO parser
60
60
Vulnerability Spotlight: Netgear Orbi router vulnerable to arbitrary command execution
60
60
60
60
Vulnerability Spotlight: Vulnerabilities in WWBN AVideo web app could lead to command injection, authentication bypass
60
60
Vulnerability Spotlight: Issue in Accusoft ImageGear could lead to memory corruption, code execution
60
60
30
Vulnerability Spotlight: Vulnerabilities in Open Automation Software Platform could lead to information disclosure, denial of service
60
60
57
60
Vulnerability Spotlight: Two vulnerabilities in Accusoft ImageGear could lead to DoS, arbitrary free
60
60
Vulnerability Spotlight: Vulnerabilities in Gerbv could lead to code execution, information disclosure
60