ID:13069 - Exploit for Authentication bypass using an alternate path or channel in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - CVE-2026-20079

 
Main Vulnerability Database Exploits ID:13069 - Exploit for Authentication bypass using an alternate path or channel in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - CVE-2026-20079

ID:13069 - Exploit for Authentication bypass using an alternate path or channel in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - CVE-2026-20079

Published: September 9, 2026


Vulnerability identifier: #VU123530
Vulnerability risk: Critical
CVE-ID: CVE-2026-20079
CWE-ID: CWE-288
Exploitation vector: Remote access
Vulnerable software:
Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC)

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to an improper system process that is created at boot time. A remote non-authenticated attacker can bypass authentication process in the web interface and execute arbitrary code on the system with root privileges. 


Remediation

Install updates from vendor's website.