GCVE-110-NCSC-2026-76

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published March 4, 2026

A vulnerability in Cisco Secure Firewall Management Center's web interface allows unauthenticated remote attackers to bypass authentication and execute scripts to gain root access due to an improper system process created at boot.

Download JSON Open in Console

Weaknesses (CWE)

CWE-288Authentication Bypass Using an Alternate Path or ChannelCWE-502Deserialization of Untrusted Data

Risk Scores

CVSS 3.1

10.0/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Cisco	vers:unknown/*	—	—

Aliases

CVE-2026-20079 CVE-2026-20131

References

advisory

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON