Search: CVE-2026-20079

CVE-2026-20079 is a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC) web interface. It allows an unauthenticated remote attacker to bypass authentication and execute scripts on the device, gaining root access to the underlying operating system. The flaw arises from an improper system process created at boot time. Exploitation requires sending crafted HTTP requests to the affected device. This vulnerability affects multiple specific versions of Cisco FMC. It has a CVSS score of 10.0 and is known to be exploited in the wild.