Cisco says attackers are actively exploiting a critical flaw in Cisco Secure Firewall Management Center, the system many organizations use to manage their firewalls. The bug, CVE-2026-20079, is an authentication bypass that can be triggered with crafted HTTP requests and can lead to root access on vulnerable devices. Cisco patched it in March 2026, added indicators of compromise in July, and now says exploitation began in August; CISA has added it to the Known Exploited Vulnerabilities catalog.
Lawrence Abrams
2026.09.23
92% relevant
This article adds that CVE-2026-20079 was chained with CVE-2026-20316 in real attacks against Cisco Secure Firewall Management Center, links the activity to specific threat clusters, notes use of Qilin ransomware in some intrusions, and cites a Cyclops Blink variant found on compromised appliances.
Ionut Arghire
2026.09.17
68% relevant
The source specifically ties newly patched FMC vulnerabilities to the same vulnerability class as CVE-2026-20079, saying Cisco highlighted CVE-2026-20332 because two related flaws in that class, including CVE-2026-20079, have already been exploited in the wild.
info@thehackernews.com (The Hacker News)
2026.09.11
96% relevant
This article appears to update the same underlying event by adding intrusion details: attackers used the exploited Cisco Secure Firewall Management Center flaw to steal credentials and then deploy Qilin ransomware.
Lawrence Abrams
2026.09.10
96% relevant
This is a direct update on the same exploitation campaign around CVE-2026-20079, adding concrete intrusion details from Cisco Talos and showing that attackers also chained CVE-2026-20316 to gain access, then used compromised FMC devices for credential theft, persistence, ransomware deployment, and Cyclops Blink malware.
Eduard Kovacs
2026.09.10
100% relevant
This article establishes a distinct actively exploited Cisco Secure Firewall Management Center event centered on CVE-2026-20079, which is not itself the same underlying event as the already tracked CVE-2026-20316 zero-day story.