https://vulnerability.circl.lu/sightings/feed 2026-08-29T12:32:06.694769+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b3709ff1-88d6-41ea-a8ac-2976f1b1b76b/export 2026-08-29T12:32:06.721530+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b3709ff1-88d6-41ea-a8ac-2976f1b1b76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-23T00:00:45.561510Z"} 2026-08-23T00:00:45.561510+00:00 https://vulnerability.circl.lu/sighting/b397866a-b4c9-4762-ae65-2a1254e468dd/export 2026-08-29T12:32:06.723445+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b397866a-b4c9-4762-ae65-2a1254e468dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-22T00:00:11.134841Z"} 2026-08-22T00:00:11.134841+00:00 https://vulnerability.circl.lu/sighting/fb7041a0-aff2-498c-8435-752e1f8d3dab/export 2026-08-29T12:32:06.723532+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fb7041a0-aff2-498c-8435-752e1f8d3dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-21T23:00:07.534885Z"} 2026-08-21T23:00:07.534885+00:00 https://vulnerability.circl.lu/sighting/aba31054-c2ac-4a47-b5b0-ca0fac1502ed/export 2026-08-29T12:32:06.723607+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "aba31054-c2ac-4a47-b5b0-ca0fac1502ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:08.000196Z"} 2026-08-12T04:45:08.000196+00:00 https://vulnerability.circl.lu/sighting/f3eee27b-cf88-4c96-bc32-41e92ac0bf20/export 2026-08-29T12:32:06.724360+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f3eee27b-cf88-4c96-bc32-41e92ac0bf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mss2573h3p2t", "content": "Hard-Coded Passwords in Firewalls: SMBs Must Act Now\n\nCVE-2026-20316 exposes Cisco Secure Firewall Management Center via hard-coded credentials. Learn ATT&CK techniques and SMB detection steps.\n\nhttps://threatclaw.io/en/blog/threat-brief-2026-08-04\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-08-11T07:00:24.152204Z"} 2026-08-11T07:00:24.152204+00:00 https://vulnerability.circl.lu/sighting/a6cb8c33-89cf-4501-9dc3-4199824f69f1/export 2026-08-29T12:32:06.724444+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a6cb8c33-89cf-4501-9dc3-4199824f69f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3msjbhocj5y2z", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20316", "creation_timestamp": "2026-08-07T19:18:28.185354Z"} 2026-08-07T19:18:28.185354+00:00 https://vulnerability.circl.lu/sighting/4a82c051-a0dc-4bca-b65b-a3a2547361a5/export 2026-08-29T12:32:06.724511+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4a82c051-a0dc-4bca-b65b-a3a2547361a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "Cisco ha rilasciato aggiornamenti di sicurezza che risolvono molteplici vulnerabilit\u00e0, tra cui 5 con gravit\u00e0 \"critica\" e 11 con gravit\u00e0 \u201calta\u201d, riguardanti vari prodotti. In particolare si evidenziano la CVE-2026-20316 che risulta attivamente sfruttata in rete e la CVE-2026-20200 per la quale \u00e8 disponibile un Proof of Concept (PoC).", "creation_timestamp": "2026-08-07T04:00:38.865092Z"} 2026-08-07T04:00:38.865092+00:00 https://vulnerability.circl.lu/sighting/feb619dc-506a-4f7d-9a16-f984fcbd61de/export 2026-08-29T12:32:06.724581+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "feb619dc-506a-4f7d-9a16-f984fcbd61de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:15:28.420618Z"} 2026-08-06T12:15:28.420618+00:00 https://vulnerability.circl.lu/sighting/aabe34dd-236f-425a-84a6-86f9519d9e98/export 2026-08-29T12:32:06.724642+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "aabe34dd-236f-425a-84a6-86f9519d9e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117043564090502141", "content": "Broadcom has addressed several vulnerabilities published yesterday, all of them ranked high-severity https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCisco has a new advisory for a critical vulnerability that was published yesterday:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability \nThis addresses a vulnerability that was first published on July 29:\nHigh: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-05T15:17:36.520415Z"} 2026-08-05T15:17:36.520415+00:00 https://vulnerability.circl.lu/sighting/d586554a-e4f0-4dfa-9cf2-57b97ed60870/export 2026-08-29T12:32:06.724711+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d586554a-e4f0-4dfa-9cf2-57b97ed60870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msaae2wvkr26", "content": "Daily IT Security Digest \u2014 2026-08-04\nvulnerabilities: CVE-2026-20316 in Secure Firewall Management Center (FMC) exposes static credentials that could leak sensitive data, and CVE-2026-20262 in Catalyst SD-WAN Manager allows write-access attackers to escalate to root via crafted HTTP requests. Both", "creation_timestamp": "2026-08-04T05:03:41.887207Z"} 2026-08-04T05:03:41.887207+00:00