InfoSecBulletin Cybersecurity for mankind
Cisco has said that a serious security flaw CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being used in attacks. The flaw has a highest CVSS score of 10.0. It lets remote attackers, who are not logged in, get around security checks and run scripts or commands as the admin on weak devices.
“In August 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability,” Cisco updated its CVE-2026-20079 advisory to say on Wednesday. Cisco first mentioned CVE-2026-20079 in March. The company said it had no proof that anyone was using the flaw in attacks.
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
The flaw happens because of a improper system process that starts when the device boots up. It can be taken advantage of by sending special HTTP requests to the device’s web interface.
The weakness impacts Cisco Secure FMC Software and Cisco Security Cloud Control Firewall Management. Cisco states it has already fixed the cloud-hosted Security Cloud Control service.
Cisco says there are no fixes and suggests that customers update to the newest software version.
Cisco advises customers who see signs of compromise to reach out to its TAC for help. They warn that installing the hot fixes will stop future attacks but won’t fix devices that are already affected.
