EXPOSURES › CVE-2026-20079
CVE-2026-20079
HIGH ⌖ ON CISA KEV · EXPLOITEDAn unauthenticated remote attacker could bypass authentication and execute scripts to gain root access on Cisco FMC/SCC devices.
Cisco's Secure Firewall Management Center and Security Cloud Control contain an authentication bypass vulnerability allowing remote attackers to execute scripts and obtain root access without credentials. This is a severe failure for DIB organizations relying on Cisco firewalls, as it enables full system compromise and violates NIST 800-171 access control requirements. Organizations must verify patch levels and avoid using unpatched FMC/SCC devices in production.
Shame score — An unauthenticated remote attacker could bypass authentication and execute scripts to gain root access, representing a severe, avoidable failure in secure development and access control.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.
| PRODUCT | STATUS |
|---|---|
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |