Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Three threat clusters including a Sandworm-linked group and Qilin ransomware operators exploit Cisco FMC flaws CVE-2026-20079 and CVE-2026-20316.
2
Stories per day · 30 days
2 RSS
11 stories, newest first · one card per story
Stories tagged #cve-2026-20079
Cisco FMC CVE-2026-20079 Actively Exploited
Cisco confirms active exploitation of CVE-2026-20079, a maximum-severity authentication bypass in Secure Firewall Management Center.
1
Organizations Warned of Cisco Secure FMC Exploitation
Cisco and CISA warn that critical FMC authentication bypass CVE-2026-20079 is actively exploited; CISA added it to the KEV catalog with a September 12 deadline.
Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks
Cisco confirmed active exploitation of CVE-2026-20079, a CVSS 10.0 authentication bypass enabling unauthenticated root command execution in Secure FMC; CISA added it to KEV.
1
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
Cisco Talos reports in-the-wild exploitation of critical FMC flaw CVE-2026-20079 by three clusters including a Sandworm-linked APT and Qilin ransomware affiliates.
2
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
2
Cisco FMC static credentials exploited by attackers (CVE-2026-20316)
2
Cisco reveals 2 max-severity defects in firewall management software
2
Cisco Issues Patches for 48 Vulnerabilities
Cisco warns of SD-WAN Manager exploitation, fixes 48 firewall vulnerabilities
1
Cisco fixes maximum-severity Secure FMC bugs threatening firewall security
1