https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 29 Aug 2026 12:31:43 +0000 https://vulnerability.circl.lu/sighting/b3709ff1-88d6-41ea-a8ac-2976f1b1b76b/export {"uuid": "b3709ff1-88d6-41ea-a8ac-2976f1b1b76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-23T00:00:45.561510Z"} {"uuid": "b3709ff1-88d6-41ea-a8ac-2976f1b1b76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-23T00:00:45.561510Z"} https://vulnerability.circl.lu/sighting/b3709ff1-88d6-41ea-a8ac-2976f1b1b76b/export Sun, 23 Aug 2026 00:00:45 +0000 https://vulnerability.circl.lu/sighting/b397866a-b4c9-4762-ae65-2a1254e468dd/export {"uuid": "b397866a-b4c9-4762-ae65-2a1254e468dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-22T00:00:11.134841Z"} {"uuid": "b397866a-b4c9-4762-ae65-2a1254e468dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-22T00:00:11.134841Z"} https://vulnerability.circl.lu/sighting/b397866a-b4c9-4762-ae65-2a1254e468dd/export Sat, 22 Aug 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/fb7041a0-aff2-498c-8435-752e1f8d3dab/export {"uuid": "fb7041a0-aff2-498c-8435-752e1f8d3dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-21T23:00:07.534885Z"} {"uuid": "fb7041a0-aff2-498c-8435-752e1f8d3dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-21T23:00:07.534885Z"} https://vulnerability.circl.lu/sighting/fb7041a0-aff2-498c-8435-752e1f8d3dab/export Fri, 21 Aug 2026 23:00:07 +0000 https://vulnerability.circl.lu/sighting/aba31054-c2ac-4a47-b5b0-ca0fac1502ed/export {"uuid": "aba31054-c2ac-4a47-b5b0-ca0fac1502ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:08.000196Z"} {"uuid": "aba31054-c2ac-4a47-b5b0-ca0fac1502ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:08.000196Z"} https://vulnerability.circl.lu/sighting/aba31054-c2ac-4a47-b5b0-ca0fac1502ed/export Wed, 12 Aug 2026 04:45:08 +0000 https://vulnerability.circl.lu/sighting/f3eee27b-cf88-4c96-bc32-41e92ac0bf20/export {"uuid": "f3eee27b-cf88-4c96-bc32-41e92ac0bf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mss2573h3p2t", "content": "Hard-Coded Passwords in Firewalls: SMBs Must Act Now\n\nCVE-2026-20316 exposes Cisco Secure Firewall Management Center via hard-coded credentials. Learn ATT&CK techniques and SMB detection steps.\n\nhttps://threatclaw.io/en/blog/threat-brief-2026-08-04\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-08-11T07:00:24.152204Z"} {"uuid": "f3eee27b-cf88-4c96-bc32-41e92ac0bf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mss2573h3p2t", "content": "Hard-Coded Passwords in Firewalls: SMBs Must Act Now\n\nCVE-2026-20316 exposes Cisco Secure Firewall Management Center via hard-coded credentials. Learn ATT&CK techniques and SMB detection steps.\n\nhttps://threatclaw.io/en/blog/threat-brief-2026-08-04\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-08-11T07:00:24.152204Z"} https://vulnerability.circl.lu/sighting/f3eee27b-cf88-4c96-bc32-41e92ac0bf20/export Tue, 11 Aug 2026 07:00:24 +0000 https://vulnerability.circl.lu/sighting/a6cb8c33-89cf-4501-9dc3-4199824f69f1/export {"uuid": "a6cb8c33-89cf-4501-9dc3-4199824f69f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3msjbhocj5y2z", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20316", "creation_timestamp": "2026-08-07T19:18:28.185354Z"} {"uuid": "a6cb8c33-89cf-4501-9dc3-4199824f69f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3msjbhocj5y2z", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20316", "creation_timestamp": "2026-08-07T19:18:28.185354Z"} https://vulnerability.circl.lu/sighting/a6cb8c33-89cf-4501-9dc3-4199824f69f1/export Fri, 07 Aug 2026 19:18:28 +0000 https://vulnerability.circl.lu/sighting/4a82c051-a0dc-4bca-b65b-a3a2547361a5/export {"uuid": "4a82c051-a0dc-4bca-b65b-a3a2547361a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "Cisco ha rilasciato aggiornamenti di sicurezza che risolvono molteplici vulnerabilit\u00e0, tra cui 5 con gravit\u00e0 \"critica\" e 11 con gravit\u00e0 \u201calta\u201d, riguardanti vari prodotti. In particolare si evidenziano la CVE-2026-20316 che risulta attivamente sfruttata in rete e la CVE-2026-20200 per la quale \u00e8 disponibile un Proof of Concept (PoC).", "creation_timestamp": "2026-08-07T04:00:38.865092Z"} {"uuid": "4a82c051-a0dc-4bca-b65b-a3a2547361a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "Cisco ha rilasciato aggiornamenti di sicurezza che risolvono molteplici vulnerabilit\u00e0, tra cui 5 con gravit\u00e0 \"critica\" e 11 con gravit\u00e0 \u201calta\u201d, riguardanti vari prodotti. In particolare si evidenziano la CVE-2026-20316 che risulta attivamente sfruttata in rete e la CVE-2026-20200 per la quale \u00e8 disponibile un Proof of Concept (PoC).", "creation_timestamp": "2026-08-07T04:00:38.865092Z"} https://vulnerability.circl.lu/sighting/4a82c051-a0dc-4bca-b65b-a3a2547361a5/export Fri, 07 Aug 2026 04:00:38 +0000 https://vulnerability.circl.lu/sighting/feb619dc-506a-4f7d-9a16-f984fcbd61de/export {"uuid": "feb619dc-506a-4f7d-9a16-f984fcbd61de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:15:28.420618Z"} {"uuid": "feb619dc-506a-4f7d-9a16-f984fcbd61de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:15:28.420618Z"} https://vulnerability.circl.lu/sighting/feb619dc-506a-4f7d-9a16-f984fcbd61de/export Thu, 06 Aug 2026 12:15:28 +0000 https://vulnerability.circl.lu/sighting/aabe34dd-236f-425a-84a6-86f9519d9e98/export {"uuid": "aabe34dd-236f-425a-84a6-86f9519d9e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117043564090502141", "content": "Broadcom has addressed several vulnerabilities published yesterday, all of them ranked high-severity https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCisco has a new advisory for a critical vulnerability that was published yesterday:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability \nThis addresses a vulnerability that was first published on July 29:\nHigh: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-05T15:17:36.520415Z"} {"uuid": "aabe34dd-236f-425a-84a6-86f9519d9e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117043564090502141", "content": "Broadcom has addressed several vulnerabilities published yesterday, all of them ranked high-severity https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCisco has a new advisory for a critical vulnerability that was published yesterday:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability \nThis addresses a vulnerability that was first published on July 29:\nHigh: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-05T15:17:36.520415Z"} https://vulnerability.circl.lu/sighting/aabe34dd-236f-425a-84a6-86f9519d9e98/export Wed, 05 Aug 2026 15:17:36 +0000 https://vulnerability.circl.lu/sighting/d586554a-e4f0-4dfa-9cf2-57b97ed60870/export {"uuid": "d586554a-e4f0-4dfa-9cf2-57b97ed60870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msaae2wvkr26", "content": "Daily IT Security Digest \u2014 2026-08-04\nvulnerabilities: CVE-2026-20316 in Secure Firewall Management Center (FMC) exposes static credentials that could leak sensitive data, and CVE-2026-20262 in Catalyst SD-WAN Manager allows write-access attackers to escalate to root via crafted HTTP requests. Both", "creation_timestamp": "2026-08-04T05:03:41.887207Z"} {"uuid": "d586554a-e4f0-4dfa-9cf2-57b97ed60870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msaae2wvkr26", "content": "Daily IT Security Digest \u2014 2026-08-04\nvulnerabilities: CVE-2026-20316 in Secure Firewall Management Center (FMC) exposes static credentials that could leak sensitive data, and CVE-2026-20262 in Catalyst SD-WAN Manager allows write-access attackers to escalate to root via crafted HTTP requests. Both", "creation_timestamp": "2026-08-04T05:03:41.887207Z"} https://vulnerability.circl.lu/sighting/d586554a-e4f0-4dfa-9cf2-57b97ed60870/export Tue, 04 Aug 2026 05:03:41 +0000