PT-2026-22976 · Cisco · Cisco Secure Firewall Management Center (Fmc)

Jason Crowder · Published 2026-03-04 · Updated 2026-03-04 · CVE-2026-20044

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Management Center (FMC) Software (affected versions not specified)

Description A flaw exists in the lockdown mechanism of the software that may allow a local attacker with valid administrative credentials to execute arbitrary commands as root. The issue stems from inadequate restrictions on remediation modules when the system is in lockdown mode. Exploitation involves sending crafted input to the system command-line interface (CLI). A successful exploit could enable an attacker to run arbitrary commands or code with root privileges, even while the system is in lockdown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-20044

Affected Products

Cisco Secure Firewall Management Center (Fmc)

References · 4

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20044 · Security Note
• https://t.me/CVEtracker/46328 · Telegram Post
• https://twitter.com/CVEnew/status/2029272813585027295 · Twitter Post