InfoSecBulletin Cybersecurity for mankind
Cisco has said that a serious security flaw CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being used in attacks. The flaw has a highest CVSS score of 10.0. It lets remote attackers, who are not logged in, get around security checks and run scripts or commands as the admin on weak devices.
“In August 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability,” Cisco updated its CVE-2026-20079 advisory to say on Wednesday. Cisco first mentioned CVE-2026-20079 in March. The company said it had no proof that anyone was using the flaw in attacks.
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Hacker stole Meta GitHub repos; Stole Source Code
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
Microsoft patches record braking 1411 flaws; 2 zero days
The flaw happens because of a improper system process that starts when the device boots up. It can be taken advantage of by sending special HTTP requests to the device’s web interface.
The weakness impacts Cisco Secure FMC Software and Cisco Security Cloud Control Firewall Management. Cisco states it has already fixed the cloud-hosted Security Cloud Control service.
Cisco says there are no fixes and suggests that customers update to the newest software version.
Cisco advises customers who see signs of compromise to reach out to its TAC for help. They warn that installing the hot fixes will stop future attacks but won’t fix devices that are already affected.
