Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

Cisco's Secure Firewall Management Center (FMC) software is affected by an actively exploited zero-day vulnerability (CVE-2026-20316). The flaw involves static user credentials that allow an unauthenticated remote attacker to gain low-privilege access, which can be chained with other vulnerabilities for privilege escalation.

This Wire brief sits within Fusion42's coverage of Cybersecurity.