PT-2026-22966 · Cisco · Cisco Secure Firewall Management Center

Kyle Ossinger · Published 2026-03-04 · Updated 2026-03-04 · CVE-2026-20002

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Management Center (FMC) (affected versions not specified)

Description A flaw exists in the web-based management interface of Cisco Secure FMC Software that could permit an authenticated, remote attacker to perform SQL injection attacks. This issue stems from insufficient validation of user-supplied input. An attacker could leverage this by transmitting specially crafted requests to a vulnerable device. A successful exploit may grant the attacker complete database access and the ability to read specific files on the underlying operating system. Valid user credentials are required for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-20002

Affected Products

Cisco Secure Firewall Management Center

References · 6

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20002 · Security Note
• https://t.me/CVEtracker/46331 · Telegram Post
• https://twitter.com/ptdbugs/status/2029268059727257933 · Twitter Post
• https://twitter.com/CVEnew/status/2029272810858697155 · Twitter Post
• https://twitter.com/TheHackerWire/status/2029270690172682397 · Twitter Post