https://www.phllaps.net/products/cisco-secure-firewall-management-center-fmc-appliances/ Recent content in Cisco Secure Firewall Management Center (FMC) Appliances on PhllapsNET Hugo en-gb Wed, 05 Aug 2026 14:37:42 +0000 https://www.phllaps.net/posts/cisco-secure-firewall-management-center-software-authentication-bypass-vulnerability/ Wed, 05 Aug 2026 14:37:42 +0000 https://www.phllaps.net/posts/cisco-secure-firewall-management-center-software-authentication-bypass-vulnerability/ <div style="background:#b91c1c;color:white;padding:16px 18px;border-radius:14px;font-weight:800;font-size:18px;display:flex;align-items:center;gap:12px;box-shadow:0 10px 24px rgba(0,0,0,0.18);"><span style="font-size:24px;">🚨</span><span>SEVERITY: CRITICAL — CVSS 10.0</span><span style="opacity:0.95;font-weight:700;margin-left:auto;">Security Advisory</span></div> <h2 id="tldr-">TL;DR 📌</h2> <ul> <li>A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at boot time.…</li> <li>Highest CVSS: <strong>10.0 (Critical)</strong>.</li> <li><strong>Check the advisory for fixed releases</strong> — remediation detail is in the vendor link below.</li> <li>CVEs: CVE-2026-20079.</li> </ul> <h2 id="what-it-is">What it is</h2> <p>CVE-2026-20079 is an authentication bypass in the web interface of Cisco Secure Firewall Management Center (FMC) Software. It carries a CVSS score of 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) — network-exploitable, no privileges, no user interaction, and full impact on confidentiality, integrity and availability.</p>