Cisco FMC CVE-2026-20079: exploitation confirmed for authentication bypass to root

Published 10 Sep 2026 · Severity: critical

Cisco's 9 September revision confirms active exploitation of CVE-2026-20079. Unauthenticated requests to the FMC web interface can lead to root access. Patch promptly and investigate: Cisco warns that its hotfixes prevent future exploitation but may not resolve existing compromise.