criticalKEV
CVE-2026-20079
Cisco Secure Firewall Management Center authentication bypass - a hardcoded internal session id is accepted from the network, giving an unauthenticated attacker the authenticated console and script execution as root (CVSS 10.0, CISA KEV)
- Severity
- critical
- Affected product
- Cisco Secure Firewall Management Center
- Affected versions
- Cisco Secure Firewall Management Center all versions before the fix
- Detection basis
- Appliance fingerprint
- Shipped rule
- Cisco Secure Firewall Management Center: Cisco Secure Firewall Management Center authentication bypass - a hardcoded internal session id is accepted from the network, giving an unauthenticated attacker the authenticated console and script execution as root (CVSS 10.0, CISA KEV)
- CISA KEV
- Listed as a known exploited vulnerability
- EPSS
- 36% chance of exploitation in the next 30 days
- Added to NewScan
- 2026-09-10
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
APPLIANCE FINGERPRINT
NewScan fingerprints the Cisco Secure Firewall Management Center appliance and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.