Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-20316

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow t
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c219607a0c36eced531128d1f09013008c1d7750c610356a5b802fe18d5d9f91
Known exploited
CISA KEV
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"defaultStatus":"unknown","product":"Cisco Secure Firewall Management Center (FMC)","vendor":"Cisco","versions":[{"status":"affected","version":"7.0.0"},{"status":"affected","version":"7.0.0.1"},{"status":"affected","version":"7.0.1"},{"status":"affected","version":"7.0.1.1"},{"status":"affected","version":"7.0.2"},{"status":"affected","version":"7.2.0"},{"status":"affected","version":"7.0.2.1"},{"status":"affected","version":"7.0.3"},{"status":"affected","version":"7.2.0.1"},{"status":"affected","version":"7.0.4"},{"status":"affected","version":"7.2.1"},{"status":"affected","version":"7.0.5"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a69bf3cf6ef53964b7f575364ad8af9f5cd75b76adaa43ab81d9f12bac31047a · sha256:a1c04a0c9e42c648… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:a69bf3cf6ef53964b7f575364ad8af9f5cd75b76adaa43ab81d9f12bac31047a · sha256:a1c04a0c9e42c648… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-259","description":"Use of Hard-coded Password","lang":"en","type":"cwe"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:a69bf3cf6ef53964b7f575364ad8af9f5cd75b76adaa43ab81d9f12bac31047a · sha256:a1c04a0c9e42c648… · /containers/cna/problemTypes/0/descriptions/0

Known exploitation assertions

2 source assertions
{"cwes":["CWE-259"],"dateAdded":"2026-07-29","dueDate":"2026-08-01","knownRansomwareCampaignUse":"Unknown","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20316","product":"Secure Firewall Management Center (FMC)","requiredA…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:3947776a9d60236a2e12ab86e5e7852de5cd8516a927f223463127398647f49f · sha256:16acee8334e59e44… · /vulnerabilities/1
    Open source location →
{"cwes":["CWE-259"],"dateAdded":"2026-07-29","dueDate":"2026-08-01","knownRansomwareCampaignUse":"Unknown","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20316","product":"Secure Firewall Management Center (FMC)","requiredA…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:d77a88d803686583f7519a16e0a43bf93a1311d8c014d781c5792b1061134a3c · sha256:635dff916c4092c0… · /vulnerabilities/4
    Open source location →

Source references

2 source assertions
{"name":"cisco-sa-fmc-static-cred-BET3Cjh","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a69bf3cf6ef53964b7f575364ad8af9f5cd75b76adaa43ab81d9f12bac31047a · sha256:a1c04a0c9e42c648… · /containers/cna/references/0
{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20316"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a69bf3cf6ef53964b7f575364ad8af9f5cd75b76adaa43ab81d9f12bac31047a · sha256:a1c04a0c9e42c648… · /containers/adp/0/references/0

Attribution and limitations

  • CISA Known Exploited Vulnerabilities JSON: CISA named for provenance; do not use CISA/DHS marks or imply endorsement Source →
  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer