Cisco FMC static credentials exploited by attackers (CVE-2026-20316)

Attackers are exploiting a static credentials vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC), according to CISA. The flaw, reported by Jimi Sebree of Horizon3.ai, involves low-privileged static user credentials in the FMC web interface that allow unauthorized login.

A static credentials vulnerability CVE-2026-20316 in Cisco Secure Firewall Management Center FMC , a platform for centrally managing multiple Cisco Secure Firewall devices across a network, is being leveraged by attackers, CISA warned. Two FMC flaws, one indicator of compromise CVE-2026-20316, reported by Jimi Sebree of Horizon3.ai, is found in the FMC software’s web interface. The static user credentials are for a low-privileged account, and they can be used by attackers to log in to an … More https://www.helpnetsecurity.com/2026/07/30/cisco-fmc-cve-2026-20316-exploited/ The post Cisco FMC static credentials exploited by attackers CVE-2026-20316 https://www.helpnetsecurity.com/2026/07/30/cisco-fmc-cve-2026-20316-exploited/ appeared first on Help Net Security https://www.helpnetsecurity.com .