PT-2026-65844 · Cisco · Cisco Secure Firewall Management Center

CVE-2026-20316 · Published 2026-07-29 · Updated 2026-07-29

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Management Center (affected versions not specified)

Description The web interface contains static user credentials for a low-privileged account. An unauthenticated remote attacker can use these hard-coded credentials to log in to the system and access sensitive data. This issue can be combined with other vulnerabilities to elevate privileges. The attack surface is reduced if the management interface is not accessible via the public internet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-259

Related Identifiers

CVE-2026-20316

Affected Products

Cisco Secure Firewall Management Center

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-20316 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh · Vendor Advisory
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20316 · Note