Story thread · 4 reports / 4 sources

Cisco FMC static credentials exploited by attackers (CVE-2026-20316)

helpnetsecurity.com · 12dShare

A static credentials vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC), a platform for centrally managing multiple Cisco Secure Firewall devices across a network, is being leveraged by attackers, CISA warned. Two FMC flaws, one indicator of compromise CVE-2026-20316, reported by Jimi Sebree of Horizon3.ai, is found in the FMC software’s web interface. The static user credentials are for a low-privileged account, and they can be used by attackers to log in to an … More → The post Cisco FMC static credentials exploited by attackers (CVE-2026-20316) appeared first on Help Net Security .

First report: Cisco warns of FMC static credential flaw exploited in zero-day attacks — bleepingcomputer.com, 12d