Cisco Issues Emergency Patches for Critical Root-Level Firewall Management Flaws

#cybersecurity #infosec

Summary

Cisco patched two critical vulnerabilities (CVE-2026-20079 and CVE-2026-20131) in its Secure Firewall Management Center that allow unauthenticated remote attackers to gain root access and execute arbitrary code.

Take Action:

If you are using Cisco FMC on premise, this is urgent and important. Make sure the web interface of the FMC is isolated and accessible only from trusted networks. Then apply a very quick patch, since even if isolated, a lot of attackers will be building tools to attack it after they do a successful phishing or endpoint compromise.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines