AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

🔥 This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)

CVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

infovulnerability🔥 Actively Exploited

security

Source: CISA Known Exploited VulnerabilitiesSeptember 8, 2026CVE-2026-20079

Summary

Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) contain an authentication bypass vulnerability (a flaw where attackers can skip login requirements) that allows remote attackers without credentials to execute script files and gain root access (complete control of the underlying operating system). This vulnerability is currently being exploited by attackers in real-world attacks.

Solution / Mitigation

Apply mitigations in accordance with vendor instructions from the Cisco security advisory (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2), ensuring compliance with CISA's BOD 26-04 patching guidelines. For cloud services, follow applicable BOD 26-04 guidance or discontinue use of the product if mitigations are unavailable.

Vulnerability Details

EPSS (30-day exploit probability)

EPSS: 35.9%

Patch Available

Yes

Exploit Maturity

🔥 Actively Exploited

Disclosure Date

September 8, 2026

Classification

Attack SophisticationModerate

Taxonomy References

CWE (Weakness Type)

CWE-288

Monthly digest — independent AI security research

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-20079

First tracked: September 9, 2026 at 08:01 PM

Classified by LLM (prompt v3) · confidence: 95%