VDB
CVE-2026-20044
CVE-2026-20044
PUBLISHED
CVSS 6 MEDIUM
A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root. This vulnerability is due to insufficient restrictions on remediation modules while in lockdown mode. An attacker could exploit this vulnerability by sending crafted input to the system CLI of the affected device. A successful exploit could allow the attacker to run arbitrary commands or code as root, even when the system is in lockdown mode. To exploit this vulnerability, the attacker must have valid administrative credentials.
EPSS 0.01% · 0.3th percentile
Risk Scores
CVSS v3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.01%
0.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.6, 6.4.0.7, 6.4.0.4 |
Timeline
- Oct 8, 2025 CVE ID Reserved
- Mar 4, 2026 CVE Published
- Mar 5, 2026 EPSS Score
- Mar 5, 2026 CVE Updated
- Mar 6, 2026 EPSS Score
- Mar 7, 2026 EPSS Score
- Mar 9, 2026 EPSS Score
- Mar 10, 2026 EPSS Score
- Mar 11, 2026 EPSS Score
- Mar 12, 2026 EPSS Score
- Mar 13, 2026 EPSS Score
- Mar 15, 2026 EPSS Score