CVE-2026-20079

CriticalCVSS 10.0/10Known exploited (CISA KEV)Last modified Sep 16, 2026

Description

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.  This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device. 

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-288

Affected software

No affected versions have been published.

Timeline

Published: Mar 4, 2026
Last modified: Sep 16, 2026
Added to CISA KEV: Sep 9, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-20088.8A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. This vulnerability affects the function CVE-2026-200805.3A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker CVE-2026-200816.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an af CVE-2026-200828.6A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could CVE-2026-200836.5A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with CVE-2026-200848.6A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets CVE-2026-200856.1A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XS CVE-2026-200868.6A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) packets of Cisco IOS XE Wireless Controller CVE-2026-200874.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privile CVE-2026-200884.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privile CVE-2026-200894.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privile CVE-2026-20096.5A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of the file /gasmark/ph