🔥 This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)
CVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Summary
Cisco Secure Firewall Management Center (FMC) has a vulnerability where a hard-coded password (a fixed password built into the software that cannot be changed) is stored in the system. An attacker anywhere on the internet could use this password to log in without permission and access sensitive data. This vulnerability is currently being exploited by real attackers.
Solution / Mitigation
Apply mitigations in accordance with vendor instructions from Cisco's security advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh, ensuring compliance with CISA's BOD 26-04 guidance on prioritizing security updates. If mitigations are unavailable, discontinue use of the product. The deadline for patching is 2026-08-01.
Vulnerability Details
EPSS: 0.0%
Yes
🔥 Actively Exploited
July 28, 2026
Classification
Taxonomy References
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-20316
First tracked: July 29, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 95%