ZDI-CAN-30390: ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

Published Aug 11, 2026

Updated

This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco Secure Firewall Management Center. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-20316.

Affected Software

1 affected component

Cisco Cisco Secure Firewall Management Center

Event History

Aug 11, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-30390?

ZDI-CAN-30390 has a CVSS rating of 9.8, indicating a critical severity level.

How do I fix ZDI-CAN-30390?

To mitigate ZDI-CAN-30390, ensure that you apply the latest security patches released by Cisco for the Secure Firewall Management Center.

What systems are affected by ZDI-CAN-30390?

ZDI-CAN-30390 affects installations of Cisco Secure Firewall Management Center.

Can ZDI-CAN-30390 be exploited remotely?

Yes, ZDI-CAN-30390 can be exploited remotely as it allows attackers to bypass authentication without needing physical access.

Is authentication required to exploit ZDI-CAN-30390?

No, authentication is not required to exploit ZDI-CAN-30390.