Search: CVE-2026-20316

CVE-2026-20316 is a vulnerability in Cisco Secure Firewall Management Center (FMC) software where a hard-coded, static password exists for a low-privileged account in the web interface. This allows an unauthenticated remote attacker to log in to the affected system using these credentials and access sensitive data. The vulnerability is rated as medium severity by CVSS but Cisco assigns a high security impact rating due to potential privilege escalation when combined with other vulnerabilities. The attack surface is reduced if the FMC management interface is not exposed to the public internet. Multiple versions of Cisco Secure FMC are affected.