A vulnerability (CVE-2026-20316, CVSS 5.3) in Cisco Secure Firewall Management Center allows a remote attacker to bypass security restrictions and disclose sensitive information, and it is being exploited in the wild. Affected versions include 7.0.0 through 7.0.9, 7.2.0 through 7.2.11, 7.3.0 through 7.3.1.2, 7.4.0 through 7.4.7, and 7.6.0 through 7.6.5. Cisco has released a security advisory with fixes, which should be applied immediately.
A vulnerability has been identified in Cisco Secure Firewall Management Center Software. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass and sensitive information disclosure on the targeted system. Note: CVE-2026-20316 is being exploited in the wild... Impact Information Disclosure Security Restriction Bypass System / Technologies affected Cisco Secure Firewall Management Center Software For affected devices, please refer to the link issued by the vendor: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh