ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability
Published Aug 11, 2026
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco Secure Firewall Management Center. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-20316.
Affected Software
1 affected component
Cisco Cisco Secure Firewall Management Center
Event History
Aug 11, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-26-533?
The severity of ZDI-26-533 is rated at 9.8 according to the CVSS.
2
How do I fix ZDI-26-533?
To fix ZDI-26-533, apply the latest security patches provided by Cisco for the Secure Firewall Management Center.
3
What type of vulnerability is ZDI-26-533?
ZDI-26-533 is an authentication bypass vulnerability that allows remote attackers to exploit affected installations without authentication.
4
What product is affected by ZDI-26-533?
ZDI-26-533 affects Cisco Secure Firewall Management Center.
5
Is authentication required to exploit ZDI-26-533?
No, authentication is not required to exploit the ZDI-26-533 vulnerability.