CVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced. Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.
Other sources
Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
If the Cisco Secure Firewall Management Center (FMC) management interface does not have public internet access, the attack surface is reduced—evaluate each asset’s internet exposure and ensure the FMC management interface is not publicly reachable, per BOD 26-04 Prioritizing Security Updates Based on Risk guidance.
- Compensating control
If mitigations are unavailable, discontinue use of the Cisco Secure Firewall Management Center (FMC) product in accordance with the stated BOD 26-04 guidance.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20316?
The severity of CVE-2026-20316 is medium with a score of 5.3.
How do I fix CVE-2026-20316?
To resolve CVE-2026-20316, update the Cisco Secure Firewall Management Center software to the latest version provided by Cisco.
What kind of attack does CVE-2026-20316 allow?
CVE-2026-20316 allows an unauthenticated, remote attacker to log in using a low-privileged account to access sensitive data.
What software is affected by CVE-2026-20316?
CVE-2026-20316 affects the Cisco Secure Firewall Management Center (FMC) software.
When was CVE-2026-20316 published?
CVE-2026-20316 was published on July 29, 2026.