CVE-2026-20079Cisco · Secure_firewall_management_center
Vulnerability data via NVD (ingested)
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device.
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
vuln:CVE-2026-20079product:"Cisco Secure Firewall Management Center" version:"7.0.0"http.html:"Secure Firewall Management Center"More intel sources (5)
vuln:CVE-2026-20079vulnerabilities.cve_id: CVE-2026-20079CVE-2026-20079CVE-2026-20079"CVE-2026-20079" exploit -site:nvd.nist.gov