CVE-2026-20343
Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeatedly invoking the API. A successful exploit could allow the attacker to download sensitive files that should be restricted and consume disk space so the device could become unresponsive, causing a DoS condition.
| CWE | CWE-306 |
| Vendor | cisco |
| Product | cisco secure firewall management center (fmc) |
| Ecosystems | |
| Industries | NetworkingTelecommunications |
| Published | Sep 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for cisco cisco secure firewall management center (fmc)
Be the first to know when new high vulnerabilities affecting cisco cisco secure firewall management center (fmc) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Cisco / Cisco Secure Firewall Management Center (FMC)
7.3.0 7.3.1 7.3.1.1 7.4.0 7.4.1 7.4.1.1 7.3.1.2 7.6.0 7.4.2 7.4.2.1 7.7.0 7.4.2.2 7.6.1 7.4.2.3 7.6.2 7.7.10 7.6.2.1 7.7.10.1 7.4.2.4 7.4.3 7.6.3 7.7.11 7.6.4 10.0.0 7.4.4 7.4.5 7.7.12 7.6.5 7.4.6 10.0.1 7.4.7