Cisco FMC Zero-Day Exploited via Hard-coded Credentials, CISA Flags Urgent Fix
Cisco disclosed CVE-2026-20316, a static credential flaw in Secure Firewall Management Center that lets unauthenticated attackers log in as a low-privilege user and steal configuration data. CISA added it to the KEV catalog, urging federal agencies to patch by Aug 1, and Cisco released updates for all affected releases.