Search: “Secure Firewall Management Center”

199 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 242 Ransomware 138 Malware 123 Exploit / PoC 90 Industry 67 Policy & legal 63 Data breach 50 Threat actor 46 AI tools & infra 17 Advisory 15 Phishing & fraud 13 Research 7 Tools 6 AI industry 5

SeverityAll critical 438 high 203 medium 140 low 60 info 49

ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

ZDI discloses CVE-2026-20316, a 9.8-rated unauthenticated authentication bypass in Cisco Secure Firewall Management Center login.cgi.

ZDI-26-533 describes an authentication bypass vulnerability in Cisco Secure Firewall Management Center's login.cgi that allows remote attackers to bypass authentication without any credentials. ZDI assigned a CVSS score of 9.8, and the flaw is tracked as CVE-2026-20316. As a central management plane for firewall infrastructure, compromise could enable broad policy changes.

ZDI Published AdvisoriesAug 11, 05:00 UTC · Aug 11, 2026Vulnerability CVE-2026-20316

Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers

Cisco Talos confirms ransomware and state-sponsored groups exploited CVE-2026-20079 and CVE-2026-20316 in Secure Firewall Management Center, deploying Qilin ransomware and Cyclops Blink.

Cisco Talos identified three threat clusters (UAT-12197, UAT-11823, UAT-11988) exploiting CVE-2026-20079, a CVSS 10.0 authentication bypass, and CVE-2026-20316, a CVSS 5.3 static-credential flaw, in Cisco Secure Firewall Management Center. Qilin affiliates used static credentials for reconnaissance and deployed Qilin ransomware; a Sandworm-linked cluster deployed a Cyclops Blink backdoor via a malicious license.tmp file; a third cluster stole credentials through a JSP web shell. Cisco has released hotfixes and urges immediate installation, with broader patches expected next week.

BleepingComputerupdated Sep 14, 09:27 UTC · 1d agofirst Sep 10, 15:43 UTC · 5d agoExploit / PoC in the wild 13 sources CVE-2026-20079 CVE-2026-20316

Transparent Tribe APT expands its Windows malware arsenal

Cisco TalosMay 13, 12:08 UTC · May 13, 2021Malware

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

CISA adds actively exploited Cisco, Citrix, and Fortinet edge-device flaws to KEV catalog, ordering federal agencies to patch by September 12, 2026.

CISA added CVE-2026-20079 (Cisco Secure Firewall Management Center authentication bypass, CVSS 10.0), CVE-2026-19490 (Citrix NetScaler ADC/Gateway authentication bypass, CVSS 9.3), and CVE-2025-25249 (FortiOS heap buffer overflow, CVSS 7.3) to the Known Exploited Vulnerabilities catalog with a September 12, 2026 deadline for FCEB agencies. Cisco confirmed active exploitation of CVE-2026-20079 in August 2026, while Previdian honeypots logged 56 NetScaler exploitation attempts since September 3. SOCRadar attributes Fortinet exploitation to a financially motivated Russian-speaking actor deploying the PivotC2 Node.js RAT, infecting 178 of over 3,000 targeted IP addresses, mostly in the US.

The Hacker Newsupdated Sep 10, 18:57 UTC · 5d agofirst Sep 10, 10:36 UTC · 5d agoExploit / PoC in the wild 5 sources CVE-2026-20079 CVE-2026-19490 CVE-2025-252491

Vulnerability Spotlight: Hard-coded password vulnerability could allow attacker to completely take over Lenovo Smart Clock

Cisco TalosApr 13, 14:39 UTC · Apr 13, 2023Vulnerability in the wildCVE-2023-0896

Vulnerability Spotlight: Vulnerabilities in popular Japanese word processing software could lead to arbitrary code execution, other issues

Cisco TalosApr 5, 15:23 UTC · Apr 5, 2023Vulnerability in the wildCVE-2022-43664 CVE-2023-22660 CVE-2023-22291+1 CVEs

Vulnerability Spotlight: Vulnerability in ManageEngine OpManager could lead to XXE attack

Cisco TalosMar 30, 19:00 UTC · Mar 30, 2023Vulnerability in the wildCVE-2022-43473

Vulnerability Spotlight: Specially crafted files could lead to denial of service, information disclosure in OpenImageIO parser

Cisco TalosMar 30, 16:00 UTC · Mar 30, 2023Vulnerability in the wildCVE-2023-24473 CVE-2023-22845 CVE-2023-24472+2 CVEs

Vulnerability Spotlight: Vulnerabilities in Open Automation Software Platform could lead to information disclosure, denial of service

Cisco TalosMay 25, 15:18 UTC · May 25, 2022Vulnerability in the wildCVE-2022-26082 CVE-2022-26833 CVE-2022-27169+5 CVEs

Vulnerability Spotlight: Multiple memory corruption vulnerabilities in NVIDIA GPU driver

Cisco TalosMay 17, 14:55 UTC · May 17, 2022Vulnerability in the wildCVE-2022-28181 CVE-2022-28182

Vulnerability Spotlight: How an attacker could chain several vulnerabilities in an industrial wireless router to gain root access

Cisco TalosMay 12, 12:00 UTC · May 12, 2022Vulnerability in the wild

Vulnerability Spotlight: WiFi-connected security camera could be manipulated to spy on communications, among other malicious actions

Cisco TalosJan 26, 21:09 UTC · Jan 26, 2022Vulnerability in the wildCVE-2021-44354 CVE-2021-44419 CVE-2021-40405+14 CVEs

Vulnerability Spotlight: Vulnerability in Apple iOS, iPad OS and MacOS could lead to disclosure of sensitive memory data

Cisco TalosJan 25, 17:31 UTC · Jan 25, 2022Vulnerability in the wildCVE-2021-30939

Vulnerability Spotlight: Two vulnerabilities in Adobe Acrobat DC could lead to arbitrary code execution

Cisco TalosJan 11, 17:09 UTC · Jan 11, 2022Vulnerability in the wildCVE-2021-44710 CVE-2021-44711

Vulnerability Spotlight: Vulnerabilities in metal detector peripheral could allow attackers to manipulate security devices

Cisco TalosDec 20, 16:11 UTC · Dec 20, 2021Vulnerability in the wildCVE-2021-21901 CVE-2021-21903 CVE-2021-21905+6 CVEs