{"vulnerability": "CVE-2026-2007", "sightings": [{"uuid": "13c3bf50-3200-470d-b12d-9214bdac336a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6q6pof52g", "content": "", "creation_timestamp": "2026-02-12T14:19:14.564822Z"}, {"uuid": "2be386b8-af1c-4feb-a6d7-f7f66afcc226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6qzakzl2r", "content": "", "creation_timestamp": "2026-02-12T14:19:43.478868Z"}, {"uuid": "f08cd09c-c3d8-40b2-89e9-84ef24cb9f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mf675nhsis2h", "content": "", "creation_timestamp": "2026-02-18T23:09:27.599382Z"}, {"uuid": "82759003-4c62-48c2-a07b-761445fbd89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mgbao3oioi2u", "content": "", "creation_timestamp": "2026-03-04T21:39:38.275391Z"}, {"uuid": "cf22cecb-278b-4161-bb3c-0710a094f23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbblkyykt27", "content": "", "creation_timestamp": "2026-03-04T21:56:08.549650Z"}, {"uuid": "e199afcf-9f62-432d-a38d-b2cca16bf673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "", "creation_timestamp": "2026-03-04T19:49:12.000000Z"}, {"uuid": "d62ecc01-a265-4272-8bf0-8785e29896a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116176712536306162", "content": "", "creation_timestamp": "2026-03-05T13:05:50.923507Z"}, {"uuid": "16dfb9b4-1b32-4a58-a56c-cedcdc10d4ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mgcuh55ql22x", "content": "", "creation_timestamp": "2026-03-05T13:06:23.394850Z"}, {"uuid": "43287879-ec1e-41b1-939c-198936124ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrhko4d2m", "content": "", "creation_timestamp": "2026-02-13T15:05:18.053053Z"}, {"uuid": "a06402dc-e0b0-47ca-9575-cc52b5c123e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "525f1d22-7221-432d-8235-17c2dab0140a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/03/05/cisco-secure-firewall-management-vulnerability.html", "content": "", "creation_timestamp": "2026-03-05T12:05:57.000000Z"}, {"uuid": "c83470b0-33a6-434e-9f1d-c9ae3466d83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.702029Z"}, {"uuid": "4068b77a-2391-4796-939e-3e5cc7ad0512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mgd4uocmib24", "content": "", "creation_timestamp": "2026-03-05T15:37:04.014565Z"}, {"uuid": "e0749476-f87b-4403-8093-23bde219c92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mgd5u77idj2p", "content": "", "creation_timestamp": "2026-03-05T15:54:41.562735Z"}, {"uuid": "0f36dba7-6196-419a-bc1a-96f05f0be53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mgcaulytks2k", "content": "", "creation_timestamp": "2026-03-05T07:15:57.925728Z"}, {"uuid": "adfaa640-8676-4659-8cb4-8466c54514df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://gist.github.com/alon710/7430e0611933cef64ec051f2ff0c3f92", "content": "", "creation_timestamp": "2026-03-05T07:50:07.000000Z"}, {"uuid": "b5896662-0422-486b-9029-944449d0f60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://gist.github.com/alon710/be29a6e9e8250480c86c1dd8a6849041", "content": "", "creation_timestamp": "2026-03-05T07:50:06.000000Z"}, {"uuid": "9e1509dd-9034-432a-bc5c-2b56c878c004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116171825746260869", "content": "", "creation_timestamp": "2026-03-04T16:23:04.628202Z"}, {"uuid": "86f24dab-a035-4175-b9da-f77504393d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/mttaggart/statuses/116172236845020794", "content": "", "creation_timestamp": "2026-03-04T18:07:37.738130Z"}, {"uuid": "88b4b0f7-c6c8-4df5-af92-b85d4e593602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/taggart-tech.com/post/3mgausywhdj2d", "content": "", "creation_timestamp": "2026-03-04T18:07:38.125495Z"}, {"uuid": "02768d16-0c3a-4f5b-9cef-39bcb28c57a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavq237mh26", "content": "", "creation_timestamp": "2026-03-04T18:23:52.963410Z"}, {"uuid": "3c183efd-0aca-4f99-a6d1-e2003b68ab86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20074", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116211519204223592", "content": "", "creation_timestamp": "2026-03-11T16:37:38.781363Z"}, {"uuid": "3b75ea38-1853-4e02-b068-3337b490e739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mi7mb2mmmc2t", "content": "", "creation_timestamp": "2026-03-29T16:52:14.739054Z"}, {"uuid": "278e6265-c2e0-4fc8-9cc3-48bccd46122a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "", "creation_timestamp": "2026-03-19T10:48:18.000000Z"}, {"uuid": "f99e1f08-4430-406a-b4bb-5f091824ae25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-cisco-secure-firewall-management-center", "content": "", "creation_timestamp": "2026-03-19T08:10:00.000000Z"}, {"uuid": "fd2b5424-5f5e-461e-b247-fb4fdb390fca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-19", "content": "", "creation_timestamp": "2026-03-04T17:11:59.000000Z"}, {"uuid": "bc658259-b881-4c35-9686-55ac6b495258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20074", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgulkmafw324", "content": "", "creation_timestamp": "2026-03-12T14:15:08.291740Z"}, {"uuid": "37f9ec89-83e4-460f-9106-49a638268517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20074", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isis-dos-kDMxpSzK", "content": "", "creation_timestamp": "2026-03-12T03:00:09.000000Z"}, {"uuid": "04df4ab8-c1f3-4e01-9bb2-8fd5e55dbc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/116297917195867330", "content": "", "creation_timestamp": "2026-03-26T22:49:47.360080Z"}, {"uuid": "daa79068-171d-4f21-b34d-ffa854aeea45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.cert.se/2026/03/kritiska-sarbarheter-i-cisco-fmc-och-cisco-scc.html", "content": "", "creation_timestamp": "2026-03-05T09:05:00.000000Z"}, {"uuid": "5d8d3378-fdda-4aea-bd2d-30e7d3fd4f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.vulncheck.com/blog/cisco-fmc-auth-bypass-cve-2026-20079", "content": "", "creation_timestamp": "2026-03-29T02:00:09.000000Z"}, {"uuid": "31ff8433-4968-4caf-a41e-62d7816d449c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.cert.se/2026/03/cert-se-veckobrev-v10.html", "content": "", "creation_timestamp": "2026-03-06T13:30:00.000000Z"}, {"uuid": "c2dd8107-2395-412f-80c7-c32459d060b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-20079.yaml", "content": "", "creation_timestamp": "2026-04-13T16:12:01.000000Z"}, {"uuid": "6beac27a-ce81-4a02-a728-c92cc283513f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjibqcxdsn2p", "content": "", "creation_timestamp": "2026-04-14T21:03:09.517140Z"}, {"uuid": "82466833-b892-4503-8b3b-99266609d43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkkjrtvn62r", "content": "", "creation_timestamp": "2026-04-15T18:45:43.601290Z"}, {"uuid": "ec9bdeaa-174b-445d-ae4c-ed82d4190e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20078", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "content": "", "creation_timestamp": "2026-04-16T18:00:00.000000Z"}, {"uuid": "35da6422-75e6-470f-aeca-2330bd0fcc2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "0aed2481-5723-4c3c-baab-2fdb933870ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/6KoHZjMq_SrRer1qOlNvHvxjVQOdHuGlAhA7BVnle1PXd2U", "content": "", "creation_timestamp": "2026-03-28T21:00:05.000000Z"}, {"uuid": "a73886df-bb37-449f-a97a-162545f7be48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/77659", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20079\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-28 13:39:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20079\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-28T14:00:04.000000Z"}, {"uuid": "237fee89-f58b-4295-a73c-8a4dfcac05f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/true_secator/7967", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Secure Firewall Management Center (FMC).\n\nSecure FMC -\u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u044d\u043a\u0440\u0430\u043d\u0430\u043c\u0438 Cisco \u0438 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-20079) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f CVE-2026-20131 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 Java \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u041f\u043e \u0447\u0430\u0441\u0442\u0438 CVE-2026-20079 \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 root-\u043f\u0440\u0430\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Java-\u043e\u0431\u044a\u0435\u043a\u0442 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Cisco Secure FMC, \u043d\u043e CVE-2026-20131 \u0442\u0430\u043a\u0436\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u0438 \u043d\u0430 Cisco Security Cloud Control (SCC) Firewall Management, \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u043f\u0440\u043e\u0449\u0430\u044e\u0449\u0438\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Cisco \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0443 Cisco PSIRT \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0440\u0430\u0432\u043d\u043e \u043a\u0430\u043a \u0438 \u043d\u0435 \u044f\u0441\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043b\u0438 PoC \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435. \u041d\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u043a\u0430\u0436\u0435\u0442.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c Cisco \u0442\u0430\u043a\u0436\u0435\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 15 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Secure FMC, Secure Firewall Adaptive Security Appliance \u0438 Secure Firewall Threat Defense.", "creation_timestamp": "2026-03-05T13:00:08.000000Z"}, {"uuid": "fa841fd4-ad8d-465f-83b7-8ffecfb32455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrtx2lfhbo2i", "content": "CISA added Cisco FMC CVE-2026-20316 to its KEV catalog after zero-day exploitation reports. Static credentials in a low-privilege account may expose sensitive data and could chain with CVE-2026-20079 for privilege escalation. #Cisco #CISAKev #ZeroDay", "creation_timestamp": "2026-07-30T07:45:23.444180Z"}, {"uuid": "da9fa982-fd34-4da8-8bbb-f655331b4a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/true_secator/8458", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Secure Firewall Management Center (FMC), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u041f\u041e Cisco Secure FMC.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Cisco, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nCVE-2026-20316 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 5,3, \u043e\u0434\u043d\u0430\u043a\u043e Cisco \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 FMC \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u0430\u043a\u0438\u043c\u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e \u0430\u0442\u0430\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Cisco Secure FMC \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 Cloud-Delivered FMC, Firewall Device Manager, Secure Firewall ASA Software, Secure Firewall Threat Defense Software \u0438\u043b\u0438 Security Cloud Control.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 Secure FMC 7.0, 7.2, 7.4, 7.6, 7.7 \u0438 10.0. \u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0438\u044e\u043b\u0435 2026 \u0433\u043e\u0434\u0430 (\u0438\u043d\u044b\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0414\u0436\u0438\u043c\u0438 \u0421\u0435\u0431\u0440\u0438 \u0438\u0437 Horizon3.ai.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FMC \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 Cisco FMC \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0444\u0430\u0439\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0430 /var/log/messages \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco IOCs, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043b\u044e\u0447\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 FMC, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FMC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20079 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 CVSS 10,0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FMC.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u043c \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 CVE-2026-20316, \u0434\u043b\u044f CVE-2026-20079 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e CVE-2026-20079 \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430, \u0430 29 \u0438\u044e\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0442\u043e\u0440\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043e\u0448\u0438\u0431\u043a\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 IOCs. \u041d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435\u00a0\u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440 (/var/tmp/license.tmp) \u0432 \u043e\u0431\u043e\u0438\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u0445, \u043d\u043e \u043d\u0435 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u043e\u0431\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 CVE-2026-20079 \u043e\u0442 Cisco \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u0435\u0451 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2026-20316, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Secure FMC, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f CVE-2026-20079, \u0438 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.", "creation_timestamp": "2026-07-30T13:00:05.229893Z"}, {"uuid": "f4a1ad2a-50bb-4778-8e3e-7f87222ce036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mrudqzxuds2b", "content": "CVE-2026-20316 (CISA KEV): static credentials for a low-priv account in Cisco Secure FMC let an unauthenticated attacker log in & read sensitive data. Exploited as a zero-day, chainable with CVE-2026-20079 (CVSS 10.0) for root access. Patch now. Query: product=\"Cisco FDM\"", "creation_timestamp": "2026-07-30T11:32:46.476455Z"}, {"uuid": "ab0c7627-fcfb-442d-9d6a-6720e6068033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrtc437s4q2i", "content": "Cisco warns that CVE-2026-20316 in Secure Firewall Management Center used static credentials, enabling zero-day access to vulnerable devices. Cisco also patched CVE-2026-20079, a critical FMC auth bypass. #Cisco #CVE-2026-20316 #CVE-2026-20079", "creation_timestamp": "2026-07-30T01:30:24.343274Z"}, {"uuid": "7a2eff39-5f8f-49c3-ae4c-053aef8b0332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://t.me/true_secator/8458", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Secure Firewall Management Center (FMC), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u041f\u041e Cisco Secure FMC.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Cisco, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nCVE-2026-20316 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 5,3, \u043e\u0434\u043d\u0430\u043a\u043e Cisco \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 FMC \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u0430\u043a\u0438\u043c\u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e \u0430\u0442\u0430\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Cisco Secure FMC \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 Cloud-Delivered FMC, Firewall Device Manager, Secure Firewall ASA Software, Secure Firewall Threat Defense Software \u0438\u043b\u0438 Security Cloud Control.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 Secure FMC 7.0, 7.2, 7.4, 7.6, 7.7 \u0438 10.0. \u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0438\u044e\u043b\u0435 2026 \u0433\u043e\u0434\u0430 (\u0438\u043d\u044b\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0414\u0436\u0438\u043c\u0438 \u0421\u0435\u0431\u0440\u0438 \u0438\u0437 Horizon3.ai.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FMC \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 Cisco FMC \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0444\u0430\u0439\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0430 /var/log/messages \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco IOCs, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043b\u044e\u0447\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 FMC, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FMC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20079 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 CVSS 10,0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FMC.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u043c \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 CVE-2026-20316, \u0434\u043b\u044f CVE-2026-20079 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e CVE-2026-20079 \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430, \u0430 29 \u0438\u044e\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0442\u043e\u0440\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043e\u0448\u0438\u0431\u043a\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 IOCs. \u041d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435\u00a0\u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440 (/var/tmp/license.tmp) \u0432 \u043e\u0431\u043e\u0438\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u0445, \u043d\u043e \u043d\u0435 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u043e\u0431\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 CVE-2026-20079 \u043e\u0442 Cisco \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u0435\u0451 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2026-20316, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Secure FMC, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f CVE-2026-20079, \u0438 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.", "creation_timestamp": "2026-07-31T00:00:30.852107Z"}, {"uuid": "cc38b59c-caa8-4be9-af44-d053aac23f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mlbwk2kspo2r", "content": "PostgreSQL 18.3 shipped two weeks after 18.2 because the fix for CVE-2026-2007 in `pg_trgm` was incomplete and could produce wrong results from `strict_word_similarity()` under specific ICU locales.\n\nwww.postgresql.org/about/news/p...\n\nPG Experts runs upgrade and patching engagements: pgexperts.com.", "creation_timestamp": "2026-05-07T19:17:03.218376Z"}, {"uuid": "a3e25591-6f27-4d56-9e80-d8a497ca8c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:19.135518Z"}, {"uuid": "0301236c-dda5-4910-a163-f3c2e5afaaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3ms5zqo57e72t", "content": "Cisco Secure FMC ships with a hardcoded low-priv account (CVE-2026-20316), already exploited. Same advisory reactivates a CVSS 10.0 root bypass (CVE-2026-20079), sharing an IOC. CISA deadline Aug 1. Patch now.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/7L2hn \n\ud83c\udde9\ud83c\uddea zurl.co/R4jCx \n\n #CyberSecurity", "creation_timestamp": "2026-08-03T08:00:10.233652Z"}, {"uuid": "c6ede8dd-43dd-46ec-9c42-f0582be7e8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3ms4kslkwaw2j", "content": "\ud83d\udce2 Cisco FMC : vuln\u00e9rabilit\u00e9 zero-day CVE-2026-20316 activement exploit\u00e9e et CVE-2026-20079 critique patch\u00e9e\n\n\ud83d\udcf0 Source : BleepingComputer, publi\u00e9 le 29 juillet 2026. Cisco \u00e9met une alerte concernant deux vuln\u00e9rabilit\u00e9s affectant son\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#CiscoFMC #ZeroDay #Cyberveille", "creation_timestamp": "2026-08-02T18:00:07.437621Z"}, {"uuid": "5814da5a-84df-4452-8585-405104c40991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mmpbqecmbj2m", "content": "The May 14 minor releases (18.4, 17.10, 16.14, 15.18, 14.23) close 11 CVEs. Three are arbitrary-code-execution paths: pgcrypto (CVE-2026-2005), multibyte text validation (CVE-2026-2006), pg_trgm (CVE-2026-2007).\n\nwww.postgresql.org/about/news/p...\n\npgexperts.com.", "creation_timestamp": "2026-05-25T20:07:14.643589Z"}, {"uuid": "0a5b6955-d2ce-4008-9324-7ed9b3373157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117043564090502141", "content": "Broadcom has addressed several vulnerabilities published yesterday, all of them ranked high-severity https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCisco has a new advisory for a critical vulnerability that was published yesterday:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability  \nThis addresses a vulnerability that was first published on July 29:\nHigh: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-05T15:17:36.468088Z"}, {"uuid": "42ad26d0-8adc-4c02-a11c-4687a01c6538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117047389521944925", "content": "CRITICAL vulnerabilities patched in Cisco SD-WAN, IOS XE, FMC, and IMC. FMC flaw (CVE-2026-20079, CVSS 10.0) allows remote root access; IMC PoC public. No active exploitation. Patch now: https://radar.offseq.com/threat/cisco-patches-critical-sd-wan-ios-xe-fmc-vulnerabilities-d0d83f67659b4d15 #OffSeq #Cisco #Vulnerability #PatchTuesday", "creation_timestamp": "2026-08-06T07:30:27.762514Z"}, {"uuid": "78e7a815-d9e4-4778-aed4-7857ae8f0287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/idIOBRrg4VzKcTwjdY2a29HXXP5ypVWeuPQHuHGKT56HHBs", "content": "", "creation_timestamp": "2026-08-19T00:00:28.055893Z"}, {"uuid": "e802cbaa-935f-4dae-86c7-fab6cab2a069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/GwuC3cy-O_zU2KFCuHY_MrTkUTBOKWE1Dd5EfEUwy3SR_6M", "content": "", "creation_timestamp": "2026-08-19T00:00:28.288844Z"}, {"uuid": "e3d18280-5ef5-47d1-bc3f-037fb4a7aec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/GwuC3cy-O_zU2KFCuHY_MrTkUTBOKWE1Dd5EfEUwy3SR_6M", "content": "", "creation_timestamp": "2026-08-18T01:00:04.943745Z"}, {"uuid": "6afbf395-e00a-475e-8d61-fac260156667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/idIOBRrg4VzKcTwjdY2a29HXXP5ypVWeuPQHuHGKT56HHBs", "content": "", "creation_timestamp": "2026-08-18T01:00:04.665258Z"}, {"uuid": "ce46b954-134b-4339-bc7d-913f60525d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/GithubRedTeam/98516", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20079\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CyberAuth\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 18:39:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:07.207720Z"}, {"uuid": "e5b1a8b7-6962-4b61-b083-55ec3687af38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98516", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20079\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CyberAuth\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 18:39:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:07.487434Z"}, {"uuid": "df8d5c72-a9cf-49be-bccf-10ce64bb56fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/RMRFgroup/357", "content": "Cisco \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0443 \u0441\u0435\u0431\u0435 50 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, 2 \u0437 \u043d\u0438\u0445 \u043c\u0430\u044e\u0442\u044c \u0440\u0435\u0439\u0442\u0438\u043d\u0433 10 CVSS\n\n\u0412\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0432:\n- Adaptive Security Appliance (ASA) \u2014 \u043a\u043b\u0430\u0441\u0438\u0447\u043d\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440 \u0456\u0437 \u0432\u0456\u0434\u0441\u0442\u0435\u0436\u0435\u043d\u043d\u044f\u043c \u0441\u0442\u0430\u043d\u0443;\n- Secure FTD (Firewall Threat Defense) \u2014 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440, \u0449\u043e \u043f\u043e\u0454\u0434\u043d\u0443\u0454 ASA \u0437 \u0456\u043d\u0448\u0438\u043c\u0438, \u0431\u0456\u043b\u044c\u0448 \u043f\u0440\u043e\u0441\u0443\u043d\u0443\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0456\u044f\u043c\u0438;\n- Secure Firewall Management Center (FMC) \u2014 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u043e\u043c \u0442\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0432\u0456\u0434 \u0437\u0430\u0433\u0440\u043e\u0437 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0430;\n\n\u0417\u0440\u043e\u0437\u0443\u043c\u0456\u043b\u043e, \u0449\u043e \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0432\u0436\u0435 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456, \u0430 \u0457\u0445 \u043a\u0456\u043b\u044c\u043a\u0456\u0441\u0442\u044c \u043d\u0435 \u043c\u0430\u0454 \u043d\u0430\u0434\u0442\u043e \u0441\u0438\u043b\u044c\u043d\u043e \u0434\u0438\u0432\u0443\u0432\u0430\u0442\u0438 \u2014 Cisco \u0440\u0430\u0437 \u043d\u0430 \u043f\u0456\u0432 \u0440\u043e\u043a\u0443 \u0432\u0438\u044f\u0432\u043b\u044f\u0454 \u0446\u0456\u043b\u0443 \u043a\u0443\u043f\u0443 \u043d\u043e\u0432\u0438\u0445 \u0434\u0438\u0440\u043e\u043a \u0443 \u0446\u0438\u0445 \u0442\u0440\u044c\u043e\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0430\u0445, \u0442\u0430 \u0456 \u043b\u0438\u0448\u0435 \u0434\u0435\u044f\u043a\u0456 \u0437 \u043d\u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043b\u0438\u0432\u0456, \u0430 \u0449\u0435 \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f FMC:\n- CVE-2026-20079 \u0456 CVE-2026-20131 \u043e\u0442\u0440\u0438\u043c\u0430\u043b\u0438 \u043d\u0430\u0439\u0432\u0438\u0449\u0438\u0439 \u043c\u043e\u0436\u043b\u0438\u0432\u0438\u0439 \u0431\u0430\u043b \u0441\u0435\u0440\u0439\u043e\u0437\u043d\u043e\u0441\u0442\u0456 10 \u0437 10 \u0437\u0430 \u0448\u043a\u0430\u043b\u043e\u044e CVSS;\n- CVE-2026-20079 \u0441\u043f\u0440\u0438\u0447\u0438\u043d\u0435\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u043e\u043c, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u043c \u043f\u0456\u0434 \u0447\u0430\u0441 \u0437\u0430\u0432\u0430\u043d\u0442\u0430\u0436\u0435\u043d\u043d\u044f. \u0417\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u043f\u0456\u0434\u0456\u0431\u0440\u0430\u043d\u0438\u0445 HTTP-\u0437\u0430\u043f\u0438\u0442\u0456\u0432, \u043c\u043e\u0436\u043d\u0430 \u043e\u0431\u0456\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u044e, \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u0438 \u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0438, \u044f\u043a\u0456 \u043d\u0430\u0434\u0430\u044e\u0442\u044c \u0457\u043c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0431\u0430\u0437\u043e\u0432\u043e\u0457 \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0439\u043d\u043e\u0457 \u0441\u0438\u0441\u0442\u0435\u043c\u0438 FMC;\n- CVE-2026-20131 \u043c\u0430\u0454 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u0437\u0430\u0445\u0438\u0449\u0435\u043d\u043e\u0457 \u0434\u0435\u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u0430\u0446\u0456\u0457. \u042f\u043a\u0449\u043e \u043d\u0430\u0434\u0456\u0441\u043b\u0430\u0442\u0438 \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0439 \u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0438\u0439 Java-\u043e\u0431'\u0454\u043a\u0442 \u0434\u043e \u0432\u0435\u0431-\u0456\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f FMC, \u0432\u0456\u043d \u043c\u043e\u0436\u0435 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u0438\u0439 \u043a\u043e\u0434 \u0456 \u043f\u043e\u0442\u0435\u043d\u0446\u0456\u0439\u043d\u043e \u043f\u0456\u0434\u0432\u0438\u0449\u0438\u0442\u0438 \u0441\u0432\u043e\u0457 \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457 \u0434\u043e \u0440\u0456\u0432\u043d\u044f root.", "creation_timestamp": "2026-07-20T19:00:04.832992Z"}, {"uuid": "3c8ab30f-d998-465b-a72f-cf646a9d4ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/RMRFgroup/357", "content": "Cisco \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0443 \u0441\u0435\u0431\u0435 50 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, 2 \u0437 \u043d\u0438\u0445 \u043c\u0430\u044e\u0442\u044c \u0440\u0435\u0439\u0442\u0438\u043d\u0433 10 CVSS\n\n\u0412\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0432:\n- Adaptive Security Appliance (ASA) \u2014 \u043a\u043b\u0430\u0441\u0438\u0447\u043d\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440 \u0456\u0437 \u0432\u0456\u0434\u0441\u0442\u0435\u0436\u0435\u043d\u043d\u044f\u043c \u0441\u0442\u0430\u043d\u0443;\n- Secure FTD (Firewall Threat Defense) \u2014 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440, \u0449\u043e \u043f\u043e\u0454\u0434\u043d\u0443\u0454 ASA \u0437 \u0456\u043d\u0448\u0438\u043c\u0438, \u0431\u0456\u043b\u044c\u0448 \u043f\u0440\u043e\u0441\u0443\u043d\u0443\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0456\u044f\u043c\u0438;\n- Secure Firewall Management Center (FMC) \u2014 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u043e\u043c \u0442\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0432\u0456\u0434 \u0437\u0430\u0433\u0440\u043e\u0437 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0430;\n\n\u0417\u0440\u043e\u0437\u0443\u043c\u0456\u043b\u043e, \u0449\u043e \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0432\u0436\u0435 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456, \u0430 \u0457\u0445 \u043a\u0456\u043b\u044c\u043a\u0456\u0441\u0442\u044c \u043d\u0435 \u043c\u0430\u0454 \u043d\u0430\u0434\u0442\u043e \u0441\u0438\u043b\u044c\u043d\u043e \u0434\u0438\u0432\u0443\u0432\u0430\u0442\u0438 \u2014 Cisco \u0440\u0430\u0437 \u043d\u0430 \u043f\u0456\u0432 \u0440\u043e\u043a\u0443 \u0432\u0438\u044f\u0432\u043b\u044f\u0454 \u0446\u0456\u043b\u0443 \u043a\u0443\u043f\u0443 \u043d\u043e\u0432\u0438\u0445 \u0434\u0438\u0440\u043e\u043a \u0443 \u0446\u0438\u0445 \u0442\u0440\u044c\u043e\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0430\u0445, \u0442\u0430 \u0456 \u043b\u0438\u0448\u0435 \u0434\u0435\u044f\u043a\u0456 \u0437 \u043d\u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043b\u0438\u0432\u0456, \u0430 \u0449\u0435 \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f FMC:\n- CVE-2026-20079 \u0456 CVE-2026-20131 \u043e\u0442\u0440\u0438\u043c\u0430\u043b\u0438 \u043d\u0430\u0439\u0432\u0438\u0449\u0438\u0439 \u043c\u043e\u0436\u043b\u0438\u0432\u0438\u0439 \u0431\u0430\u043b \u0441\u0435\u0440\u0439\u043e\u0437\u043d\u043e\u0441\u0442\u0456 10 \u0437 10 \u0437\u0430 \u0448\u043a\u0430\u043b\u043e\u044e CVSS;\n- CVE-2026-20079 \u0441\u043f\u0440\u0438\u0447\u0438\u043d\u0435\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u043e\u043c, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u043c \u043f\u0456\u0434 \u0447\u0430\u0441 \u0437\u0430\u0432\u0430\u043d\u0442\u0430\u0436\u0435\u043d\u043d\u044f. \u0417\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u043f\u0456\u0434\u0456\u0431\u0440\u0430\u043d\u0438\u0445 HTTP-\u0437\u0430\u043f\u0438\u0442\u0456\u0432, \u043c\u043e\u0436\u043d\u0430 \u043e\u0431\u0456\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u044e, \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u0438 \u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0438, \u044f\u043a\u0456 \u043d\u0430\u0434\u0430\u044e\u0442\u044c \u0457\u043c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0431\u0430\u0437\u043e\u0432\u043e\u0457 \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0439\u043d\u043e\u0457 \u0441\u0438\u0441\u0442\u0435\u043c\u0438 FMC;\n- CVE-2026-20131 \u043c\u0430\u0454 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u0437\u0430\u0445\u0438\u0449\u0435\u043d\u043e\u0457 \u0434\u0435\u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u0430\u0446\u0456\u0457. \u042f\u043a\u0449\u043e \u043d\u0430\u0434\u0456\u0441\u043b\u0430\u0442\u0438 \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0439 \u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0438\u0439 Java-\u043e\u0431'\u0454\u043a\u0442 \u0434\u043e \u0432\u0435\u0431-\u0456\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f FMC, \u0432\u0456\u043d \u043c\u043e\u0436\u0435 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u0438\u0439 \u043a\u043e\u0434 \u0456 \u043f\u043e\u0442\u0435\u043d\u0446\u0456\u0439\u043d\u043e \u043f\u0456\u0434\u0432\u0438\u0449\u0438\u0442\u0438 \u0441\u0432\u043e\u0457 \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457 \u0434\u043e \u0440\u0456\u0432\u043d\u044f root.", "creation_timestamp": "2026-07-21T00:00:22.091892Z"}, {"uuid": "3ef4b484-27a4-4eda-973b-aab0a7b8b302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:44.803204Z"}, {"uuid": "15b2f139-d221-4820-a6fd-e9e981bd1843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:25.244467Z"}, {"uuid": "59b681ed-8568-4d8e-890b-7e18622ea302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117241953681889456", "content": "Broadcom has a long list of advisories today for high and medium-severity vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom #Linux \nPalo Alto:\nPalo Alto has several advisories, one of them critical:\nCRITICAL: CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing https://security.paloaltonetworks.com/CVE-2026-0310\nMore: https://security.paloaltonetworks.com/ \nCisco:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 @TalosSecurity #Cisco \nDell:\nA Dell release that impacts multiple CVEs: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000474822/dsa-2026-237-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities #Dell  \nPosted yesterday:\nApple:\nSeveral releases were posted yesterday https://support.apple.com/en-us/100100 #Apple #iOS \nAMD:\nAMD: Linux GPU Driver NULL Pointer Dereference https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6034.html #AMD \nAdobe: \nAdobe has a long list of updates here https://helpx.adobe.com/security/security-bulletin.html #Adobe #infosec #vulnerability", "creation_timestamp": "2026-09-09T16:10:42.537344Z"}, {"uuid": "44a60fb0-66ce-4aa3-991f-7079f8ffe2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv3xfinf7m26", "content": "Cisco Talos warns of Cisco FMC vulnerabilities actively exploited in the wild. Attackers chain CVE-2026-20079 and CVE-2026-20316 to deploy ransomware.\n\n#CiscoFMC #Cybersecurity #CVE202620079 #Ransomware #InfoSec", "creation_timestamp": "2026-09-09T16:28:22.937410Z"}, {"uuid": "0492c3a1-7c7c-4f88-ad3a-823b1a22503c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117242143020219712", "content": "Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.https://blog.talosintelligence.com/fmc-ongoing-exploitation/", "creation_timestamp": "2026-09-09T16:58:57.143350Z"}, {"uuid": "9be09d14-8d6b-4078-a343-3a22e0012945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mv3z52lkt22k", "content": "Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware.\nblog.talosintelligence.com/fmc-ongoing-...", "creation_timestamp": "2026-09-09T16:59:30.176016Z"}, {"uuid": "83cf8174-5c6b-446f-818e-2b7a1e068a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/09/09/active-exploitation-of-cisco-secure.html", "content": "Active exploitation of Cisco Secure Firewall Management Center vulnerabilities\n\nCisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.", "creation_timestamp": "2026-09-09T19:18:59.417619Z"}, {"uuid": "f650c906-1549-4ebc-8914-369f9d6dd99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mv4b23x63i2k", "content": "CISA put three edge appliance flaws on KEV today, all with a 12 September deadline: Citrix NetScaler, Fortinet FortiOS and Cisco Secure FMC. Talos ties the Cisco one, CVE-2026-20079, a 10.0 giving root, to Sandworm and Qilin affiliates. securityonline.info/cisc...", "creation_timestamp": "2026-09-09T19:20:58.762918Z"}, {"uuid": "aa0f4dda-0b16-4e36-96eb-2f7ac9191457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv4ciaz7or2w", "content": "\ud83d\uded1 CVE-2026-20079\nCisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) F\nCVSS 10.0 / EPSS 36% / KEV \u2705\nTL;DR: A vulnerability in the web\u2026\nhttps://cvesentinel.com/report/CVE-2026-20079?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-09T19:46:45.688157Z"}, {"uuid": "8b2adf93-9da6-49fe-9098-afcfc48603d3", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/84cfbccf-e121-41d0-a049-074a83e946f7", "content": "", "creation_timestamp": "2026-09-09T20:00:07.341414Z"}, {"uuid": "097e69af-ad10-4094-9ef9-a5f4e6171cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117243098184977306", "content": "Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco\u2019s Secure Firewall Management Center (FMC) Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco\u2019s Secure FMC Software, which allows an unauthenticated, remote attacker to bypass authentications and execute scripts on impacted devices to obtain root access to the underlying operating system. Second, CVE-2026-20316 is a vulnerability that allows a remote attacker to log in using a low-privileged account.\nhttps://blog.talosintelligence.com/fmc-ongoing-exploitation/\n#threatintel #ransomware #Qilin #KEV #CVE", "creation_timestamp": "2026-09-09T21:02:04.157972Z"}, {"uuid": "144e1824-2743-4886-a5ea-fb66ff0d9436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mv4ium46iz2l", "content": "Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks.", "creation_timestamp": "2026-09-09T21:41:03.215750Z"}, {"uuid": "248ba527-2a53-472d-83aa-80f9279ae0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/bloggersminds.com/post/3mv4jbcdnal23", "content": "Cisco Confirms Active Exploitation of CVE-2026-20079 in Secure FMC\n\nWhat is CVE-2026-20079? CVE-2026-20079 is a high\u2011severity authentication bypass vulnerability discovered in Cisco's Secure Firew\n\nhttps://bloggersminds.com/post/cisco-confirms-active-exploitation-of-cve-2026-20079-in-secure-fmc-5338", "creation_timestamp": "2026-09-09T21:48:08.416865Z"}, {"uuid": "9ab7a100-aace-46de-800e-0b53a1b32a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mv4jzbwtdv2g", "content": "\ud83d\udd12 Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in it...\n\nhttps://tinyurl.com/2c7kceax #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-09-09T22:01:33.958894Z"}, {"uuid": "1971337f-7e6c-4c33-a737-32cb6d2afb4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mv4k3hkqss2q", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nwww.bleepingcomputer.com/news/securit...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-09T22:02:47.711212Z"}, {"uuid": "427c58c2-d3ac-49e3-9133-af05999049a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mv4khs6yik2w", "content": "Cisco Confirms CVE-2026-20079 in FMC Actively Exploited by Sandworm and Qilin", "creation_timestamp": "2026-09-09T22:09:40.716603Z"}, {"uuid": "daf02a6c-e75a-4baa-90ee-55365f91828f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/117243374589142760", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-09T22:12:02.596860Z"}, {"uuid": "0c56b9bd-1d70-477f-9cc6-cff19efa27b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mv4km2kxju26", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-09-09T22:12:06.768738Z"}, {"uuid": "bd393cc9-d151-48bc-b2a4-0d42d57c6ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mv4lxvhw5f2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20079", "creation_timestamp": "2026-09-09T22:36:35.007624Z"}, {"uuid": "d8bc1975-8597-4810-a3dc-568eaf135ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/ctinow/256526", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\nhttps://ift.tt/avQ1xST", "creation_timestamp": "2026-09-09T23:00:04.683563Z"}, {"uuid": "15f69a45-ec45-4e06-84a1-f9d7943bcd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv4nru7vaf2e", "content": "Cisco Secure FMC\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027(CVE-2026-20079)\u304c\u3042\u308a\u3001\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-09-09T23:08:59.189351Z"}, {"uuid": "fc9afa7b-8226-4452-984e-b64d315db01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://t.me/ctinow/256526", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\nhttps://ift.tt/avQ1xST", "creation_timestamp": "2026-09-10T00:00:08.907855Z"}, {"uuid": "b353eba3-f252-4c75-9d1b-1e4042a1d0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mv4qokieg22s", "content": "Cisco Confirms Active Exploitation of Critical Secure FMC\u00a0Vulnerability\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability (CVE-2026-20079) in its Secure Firewall Management Center software is being actively exploited.", "creation_timestamp": "2026-09-10T00:00:49.968206Z"}, {"uuid": "3f7e544e-a0d1-4271-9dc3-7e2bf621148e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-197", "content": "", "creation_timestamp": "2026-09-10T00:15:09.659428Z"}, {"uuid": "64619ec3-2999-44db-b2c9-d4a0a867414b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mv4sumzqms2x", "content": "Cisco confirms CVE-2026-20079, a CVSS 10 unauthenticated auth bypass in Secure FMC, is exploited in the wild. No workaround; patch only. CISA added it to KEV, federal deadline Sept 12. Cisco's exploitation timeline conflicts with earlier IOC disclosure.", "creation_timestamp": "2026-09-10T00:46:43.499607Z"}, {"uuid": "5db1a404-2e10-439e-9ecb-4f9b4296ec6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "content": "Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]", "creation_timestamp": "2026-09-10T01:00:38.740792Z"}, {"uuid": "0b20758c-9793-4a60-ad76-33a82a7eba1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/09/09/active-exploitation-of-cisco-secure.html", "content": "Active exploitation of Cisco Secure Firewall Management Center vulnerabilities\n\nCisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.", "creation_timestamp": "2026-09-10T01:00:38.539491Z"}, {"uuid": "fd21c46e-edea-4d8c-9f99-de4ceef91e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv4vd4vjbp2t", "content": "\ud83e\udd16 Cisco confirms CVE-2026-20079: max-severity authentication bypass in Secure Firewall Management Center (FMC), actively exploited in attacks. Patch priority.\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-10T01:23:54.798075Z"}, {"uuid": "1d603075-750a-4e6d-abc4-ba544e32ee5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mv4ya6kmsj2y", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\uff08Cisco\u3001Secure FMC\u306e\u91cd\u5927\u8106\u5f31\u6027CVE-2026-20079\u304c\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\uff09 #BleepingComputer \uff08Sep 9\uff09\n\nwww.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-09-10T02:15:56.774778Z"}, {"uuid": "a38a20c5-dcaf-4e7a-97d7-6bfdb1a3d2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv4zzdnxsi2k", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\n", "creation_timestamp": "2026-09-10T02:47:55.743082Z"}, {"uuid": "0e95cfe6-56f1-44f8-80d8-32d080946225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv53dt3jgn2l", "content": "Cisco Secure FMC: CVE-2026-20079 (CVSS 10.0) unauthenticated RCE is under active exploitation and on CISA KEV. Apply Cisco's hot fix now. https://bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks", "creation_timestamp": "2026-09-10T03:11:40.599025Z"}, {"uuid": "7e318dca-613d-4b66-b5cc-5d9d1fa31eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv53kdt44e2l", "content": "Cisco confirms active exploitation of CVE-2026-20079, a max-severity auth bypass in Secure FMC that can grant root via crafted HTTP requests. Affects Secure Firewall Management Center and Security Cloud Control Firewall Management. #Cisco", "creation_timestamp": "2026-09-10T03:15:19.260431Z"}, {"uuid": "225bb957-9a03-4598-984a-a7addbb93c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mv55xuboim24", "content": "\ud83d\udcf0 Cisco Konfirmasi Celah Secure FMC CVE-2026-20079 Dieksploitasi dalam Serangan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/10/cisco-cve-2026-20079-secure-fmc-dieksploitasi/\n\n#cisco #cybersecurity #firewall #keamanan #keamananSiber #vulnerability #zero-day", "creation_timestamp": "2026-09-10T03:58:40.210944Z"}, {"uuid": "7c12d430-7b27-4cce-b4cf-5e64f61074eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv5exmpfnv2p", "content": "\ud83d\udee1\ufe0f Revue cyber du 10 septembre :\n\ud83d\udd34 Cisco FMC : auth bypass CVE-2026-20079 exploit\u00e9\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/\n\ud83d\udfe0 Chrome : 7e zero-day 2026 (CVE-2026-87491)\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1139/", "creation_timestamp": "2026-09-10T06:03:48.427394Z"}, {"uuid": "3e02bedc-aa7c-4432-b314-fa7c20049549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv5ghsolzz2g", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-20079: \u26a0\ufe0f CVE-2026-20079: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 35.9%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-20079-a-vulnerability-in-the-web-interface", "creation_timestamp": "2026-09-10T06:30:45.667690Z"}, {"uuid": "bb2c1fdc-eeaf-43df-9d12-07d761cdb586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mv5jokgd25vz", "content": "Cisco confirmed active exploitation of CVE-2026-20079 in Secure Firewall Management Center. Cisco says the critical auth-bypass flaw can allow unauthenticated remote root-level command execution and has no workaround. Cisco Talos says customers should apply the released hotfixes.", "creation_timestamp": "2026-09-10T07:33:04.603286Z"}, {"uuid": "d14e41fb-0436-4a70-bef2-867a27f9b9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/BleepingComputer/25525", "content": "\u200aCisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-10T08:00:05.071106Z"}, {"uuid": "a3b80f79-ff6f-4d6a-87a3-84226094d14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/Legu.mastodon.acerbo.me.ap.brid.gy/post/3mv5qpq7cirq2", "content": "Cisco confirms active exploitation of CVE-2026-20079 Cisco has confirmed that CVE-2026-20079 , a CVSS 10.\n\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-10T09:34:16.982322Z"}, {"uuid": "dbd9b7c3-054f-45eb-85b1-003c42192506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv5ts6w2fa2a", "content": "CVE-2026-20079 enables unauthenticated remote attackers to bypass authentication, execute scripts, and gain root access on vulnerable Cisco Secure Firewall FMC devices.\n", "creation_timestamp": "2026-09-10T10:29:13.125794Z"}, {"uuid": "abe51d93-1674-4534-9a77-59a4e2befe4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mv5xdrfwa224", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/09/10/c...\n\n#cybersecurity #cybersecuritynews #APT #firewall #ransomware #vulnerability @cisco.com @talosintelligence.com @horizon3ai.bsky.social", "creation_timestamp": "2026-09-10T11:32:46.079100Z"}, {"uuid": "1f8f89e2-a725-42a8-9a8d-a9e579206009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mv5xmcpuel2u", "content": "Cisco FMC(Secure Firewall Management Center)\u306e\u8106\u5f31\u6027\u3001\u56fd\u5bb6\u652f\u63f4\u578b\u653b\u6483\u8005\u3068\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483\u8005\u304c\u60aa\u7528(CVE-2026-20079\u3001CVE-2026-20316)\n\n\u56fd\u5bb6\u306e\u652f\u63f4\u3092\u53d7\u3051\u305f\u653b\u6483\u8005\u3068\u91d1\u92ad\u76ee\u7684\u306e\u653b\u6483\u8005\u304c\u3001Cisco Secure Firewall Management Center(FMC)\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\u3067\u3042\u308bCVE-2026-20079\u3092\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3057\u3066\u3044\u307e\u3059\u3002FMC\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u3067\u8907\u6570\u306eCisco Secure Firewall\u30c7\u30d0\u30a4\u30b9...", "creation_timestamp": "2026-09-10T11:37:29.924591Z"}, {"uuid": "41dfeb3d-7de6-4981-b404-5b9ebf2acc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv5xtqmcjg2h", "content": "Cisco and CISA are begging folks to care about CVE-2026-20079 exploitation on Secure FMC. Naturally, the March disclosure was ignored.\n\n#CiscoSurprise #IgnoreThePatch", "creation_timestamp": "2026-09-10T11:41:39.706438Z"}, {"uuid": "5b961602-ca0a-45b0-ab7a-1d3f30c31d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv5xtswuc22m", "content": "Here we go again, with CISA and Cisco practically pleading with organizations running Secure FMC to acknowledge that CVE-2026-20079 is being gleefully abused. Apparently disclosing a vulnerability back in March 2026 was merely an academic suggestion for most IT shops. Shielding o...\n\nRead full story", "creation_timestamp": "2026-09-10T11:41:41.768478Z"}, {"uuid": "49b8f1ba-fe74-4693-a50d-707ed4474c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mv5zld3afc2z", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\n\nwww.helpnetsecurity.com/2026/09/10/c...\n\n#Cybersecurity #Cyber #SituationalAwareness", "creation_timestamp": "2026-09-10T12:12:46.339851Z"}, {"uuid": "72989e30-2471-4e8f-9db1-6bc52f26bcfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117246840000496231", "content": "The vulnerability has a maximum CVSS score of 10.0 and allows unauthenticated, remote attackers to bypass authentication and execute scripts and commands as root on vulnerable devices. https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-10T12:53:20.409955Z"}, {"uuid": "58b88cc2-d6f6-43c0-912f-41de089ba18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/", "content": "Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.\n\nThe post Organizations Warned of Cisco Secure FMC Exploitation appeared first on SecurityWeek.", "creation_timestamp": "2026-09-10T13:00:40.856170Z"}, {"uuid": "58a81ddf-97f2-4f41-9ba0-f5490229e134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mv66a2v3pa2y", "content": "Cisco says attackers are exploiting CVE-2026-20079 in Secure FMC. The auth bypass can lead to root access, so this isn't one to leave for the next maintenance window\u2014apply Cisco's fixed release and check exposed managers now. \ud83d\udd12\n\n#Security #Cisco", "creation_timestamp": "2026-09-10T13:35:56.189052Z"}, {"uuid": "676d568c-ad0c-4669-ab70-6740d0c86984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv66ji3prz2g", "content": "\ud83e\udd16 CISA added three actively exploited flaws (Cisco, Citrix, Fortinet) to its KEV catalog. Cisco's CVE-2026-20079 is rated CVSS 10.0. Federal agencies must patch by Sept 12.\nhttps://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html", "creation_timestamp": "2026-09-10T13:41:11.420414Z"}, {"uuid": "7c90e18f-9b21-41fd-a138-4ad97ebffd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/information_security_channel/55884", "content": "Organizations Warned of Cisco Secure FMC Exploitation\nhttps://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/\n\nCisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.\nThe post Organizations Warned of Cisco Secure FMC Exploitation (https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-10T14:00:04.600921Z"}, {"uuid": "a0c052f7-f71b-4317-9a67-579d03fc1b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mv67nuscu523", "content": "Kwetsbaarheden in Cisco Firewalls Grijpen Aanvallers de Kans\n\nTwee kritieke kwetsbaarheden in Cisco Secure Firewall Management Center (FMC) Software, met de codenamen CVE-2026-20079 en CVE-2026-20316, worden momenteel actief misbruikt door staatsgesponsorde hackgroepen en...", "creation_timestamp": "2026-09-10T14:01:33.244857Z"}, {"uuid": "0f9ca07a-a046-4aee-902b-5bdc40a02dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mv6cwmh3d72m", "content": "\ud83d\udce2 Cisco confirme l'exploitation active de CVE-2026-20079, faille critique dans Secure FMC\n\nBleepingComputer, publi\u00e9 le 9 septembre 2026. Cisco a officiellement confirm\u00e9 l'exploitation active de CVE-2026-20079, une vuln\u00e9rabilit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#CISAKEV #CiscoSecureFMC #Cyberveille", "creation_timestamp": "2026-09-10T15:00:07.530484Z"}, {"uuid": "b6541eb6-cea5-4682-97d6-8b25f0786eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv6fhklk6g2l", "content": "Cisco FMC bugs CVE-2026-20079 and CVE-2026-20316 are being exploited by nation-state and ransomware actors for unauthenticated access and root control. Talos links activity to Sandworm and Qilin. #CiscoFMC #Sandworm #Qilin", "creation_timestamp": "2026-09-10T15:45:23.769712Z"}, {"uuid": "9c1baedd-3080-4264-9659-65b412c0bbfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-20079 (CVSS score: 10.0) - An authentication", "creation_timestamp": "2026-09-10T16:00:54.926858Z"}, {"uuid": "cd3d7b6d-88a5-4b98-80f6-f57b87666bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ff81ecd2-03c9-49f3-a4d2-04b4ae254c8f", "content": "", "creation_timestamp": "2026-09-10T16:04:21.976424Z"}, {"uuid": "6a94cbde-1141-41f7-ba2f-2b73a3686340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv6gzrpedh2g", "content": "CVE-2026-20079 (Cisco Secure FMC) is on CISA KEV and being exploited in the wild \u2014 apply vendor updates or isolate FMC management now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-10T16:13:28.188696Z"}, {"uuid": "6cc6c8be-3ce8-4ff6-833a-88bbf306115c", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4a2197ee-574d-4238-a771-79344c84b722", "content": "", "creation_timestamp": "2026-09-10T17:00:01.424653Z"}, {"uuid": "50f5de08-00fc-4c6c-b0d5-93c4cd5edd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117247831473136769", "content": "Three threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has confirmed the exploitation of CVE-2026-20079 and CVE-2026-20316 and urges all customers to install the released hotfixes immediately.https://www.bleepingcomputer.com/news/security/cisco-fmc-flaws-exploited-by-ransomware-gang-state-sponsored-hackers/", "creation_timestamp": "2026-09-10T17:05:29.002689Z"}, {"uuid": "605863b1-2ff8-43b5-aec0-49112b3dc6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/endoflife.ai/post/3mv6nhva6r42j", "content": "\ud83d\udcd6 New from endoflife.ai:\n\nCisco FMC CVE-2026-20079: Fixed on Six Trains, Silent on 7.3 and 7.1\n\nhttps://endoflife.ai/article-cisco-fmc-cve-2026-20079-no-fix-for-7-3", "creation_timestamp": "2026-09-10T18:08:43.896043Z"}, {"uuid": "40c161d4-3452-4e5c-861b-89388b50b7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/09/10/cisco-fmc-flaws-exploited-by.html", "content": "Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers\n\nThree threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has confirmed the exploitation of CVE-2026-20079 and CVE-2026-20316 and urges all customers to install the released hotfixes immediately.", "creation_timestamp": "2026-09-10T19:00:41.885526Z"}, {"uuid": "65797d02-9cfc-4b63-a8c0-2f1ed141c8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/luduan001.bsky.social/post/3mv6vszhilu2c", "content": "\ud83d\udee1\ufe0f Cisco confirms critical FMC vulnerability (CVE-2026-20079, CVSS 10.0) being exploited by Sandworm & Qilin ransomware. Attackers gain unauthenticated root access. CISA mandates patching by Sept 12. No workarounds \u2014 upgrade immediately. #Cybersecurity #Cisco", "creation_timestamp": "2026-09-10T20:38:07.549382Z"}, {"uuid": "ce727a4d-e669-4323-911a-0ad45401b73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mv6w6wxpck25", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]\n#hackernews #news", "creation_timestamp": "2026-09-10T20:44:48.447829Z"}, {"uuid": "bbc29d6f-c8bb-4f63-8641-a6bff6a67be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "Telegram/atcv8EwBIbBdFIko-Fk_Da89kwxzBANel4SqvKTGg4HZ_w", "content": "", "creation_timestamp": "2026-09-10T21:00:05.561300Z"}, {"uuid": "25eb57e9-b3f5-4ff3-afeb-61c39f691ce6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b74aac8-cd90-4795-8070-f991dc6120df", "content": "", "creation_timestamp": "2026-09-10T21:00:39.480074Z"}, {"uuid": "6265ad2f-6ae8-4473-8291-fba4b5e57024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/luduan001.bsky.social/post/3mv6za2ir6t2r", "content": "\ud83d\udee1\ufe0f Cisco confirms critical FMC vulnerability (CVE-2026-20079, CVSS 10.0) being exploited by Sandworm & Qilin ransomware. Attackers gain unauthenticated root access. CISA mandates patching by Sept 12. No workarounds \u2014 upgrade immediately. #Cybersecurity #Cisco", "creation_timestamp": "2026-09-10T21:39:06.092168Z"}, {"uuid": "81a70546-8c97-42d9-9e76-73b180d6c444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mv6zdufucl2v", "content": "CVE-2026-20079 is trending. Hype score 8, currently #5 on cvemon.\n\nA vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20079", "creation_timestamp": "2026-09-10T21:41:13.868166Z"}, {"uuid": "a1a90a9c-8e09-4032-8b97-b44a1642a22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "Telegram/atcv8EwBIbBdFIko-Fk_Da89kwxzBANel4SqvKTGg4HZ_w", "content": "", "creation_timestamp": "2026-09-11T00:00:28.214924Z"}, {"uuid": "924297c2-bebf-49fb-83e6-d70d9908975a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/information_security_channel/55884", "content": "Organizations Warned of Cisco Secure FMC Exploitation\nhttps://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/\n\nCisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.\nThe post Organizations Warned of Cisco Secure FMC Exploitation (https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-11T00:00:36.147708Z"}, {"uuid": "710da86a-7a0c-4bda-a1e6-d43e31cb9a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://t.me/BleepingComputer/25525", "content": "\u200aCisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-11T00:00:46.709626Z"}, {"uuid": "43d4f022-2888-4a2d-ae46-4440b0a7129f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/", "content": "Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.\n\nThe post Organizations Warned of Cisco Secure FMC Exploitation appeared first on SecurityWeek.", "creation_timestamp": "2026-09-11T01:00:34.960830Z"}, {"uuid": "5497d9da-fe40-487c-ae36-691d625887a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-20079 (CVSS score: 10.0) - An authentication", "creation_timestamp": "2026-09-11T01:00:35.739078Z"}, {"uuid": "afb1393d-46f7-4f51-a1af-f1cea6b7c1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/09/10/cisco-fmc-flaws-exploited-by.html", "content": "Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers\n\nThree threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has confirmed the exploitation of CVE-2026-20079 and CVE-2026-20316 and urges all customers to install the released hotfixes immediately.", "creation_timestamp": "2026-09-11T01:00:35.910283Z"}, {"uuid": "aa52cb76-405e-4bf4-80f2-df024c36dc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mv7ejwobk32o", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks #cybersecurity #hacking #news #infosec #security #technology #privacy", "creation_timestamp": "2026-09-11T01:01:28.686246Z"}, {"uuid": "2d17eae5-f8b7-4c27-a70c-43a4c356e5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mv7pgqy2gs4b", "content": "Cisco FMC\u306e\u8106\u5f31\u6027\u3001\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u30a2\u30af\u30bf\u30fc\u3084\u56fd\u5bb6\u578b\u30cf\u30c3\u30ab\u30fc\u306b\u60aa\u7528\u3055\u308c\u308b\uff1aCVE-2026-20079\u3001CVE-2026-20316 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47682/", "creation_timestamp": "2026-09-11T04:16:55.578476Z"}, {"uuid": "bf91ce7a-876b-4883-a70f-198adc449a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mv7qnqqrpq2e", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\uff08Cisco FMC\u306e\u8106\u5f31\u6027\u3001\u56fd\u5bb6\u652f\u63f4\u578b\u653b\u6483\u8005\u3084\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483\u8005\u304c\u60aa\u7528\uff09 #HelpNetSecurity \uff08Sep 10\uff09\n\nwww.helpnetsecurity.com/2026/09/10/c...", "creation_timestamp": "2026-09-11T04:38:25.409111Z"}, {"uuid": "03719388-7c9d-4387-bc83-2345f49c03b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv7vdda6jw2c", "content": "\ud83e\udd16 Cisco Talos: three clusters (ransomware + state-sponsored) exploited two patched Cisco Secure FMC flaws (CVE-2026-20079, CVE-2026-20316) in the wild. Patch now.\nhttps://www.bleepingcomputer.com/news/security/cisco-fmc-flaws-exploited-by-ransomware-gang-state-sponsored-hackers/", "creation_timestamp": "2026-09-11T06:02:00.570238Z"}, {"uuid": "2882d27b-ab9e-4e16-8365-461739e49d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mv7xacocub2p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 46 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-44756: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20079: 6 interactions\nCVE-2026-78082: 4 interactions\nCVE-2026-86218: 4 interactions\n", "creation_timestamp": "2026-09-11T06:36:07.128696Z"}, {"uuid": "483b44ec-e1b3-4261-91e9-c56fd8ad9511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv7zbl4tbq2j", "content": "If your Cisco Secure FMC is internet-facing, CVE-2026-20079 is being exploited in the wild \u2014 restrict access to management interfaces and follow Cisco's guidance now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-11T07:12:36.624324Z"}, {"uuid": "d5b305d0-4b0a-4009-bb20-510a099d2dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/thehackernews/10029", "content": "\ud83d\udea8 Three threat clusters exploited Cisco FMC flaws to steal credentials, deploy Cyclops Blink, and push Qilin ransomware.\n\nBoth flaws are now in CISA\u2019s KEV catalog. Federal agencies must patch CVE-2026-20079 by September 12.\n\nInside the attack chains: https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "creation_timestamp": "2026-09-11T08:00:06.872479Z"}, {"uuid": "f7292f84-4df5-4c76-9ccb-371916d184b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mva4s5b6yq2v", "content": "Cisco Talos is tracking active exploitation of two vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software: CVE-2026-20079 (authentication bypass, CVSS 10.0) and CVE-2026-20316 (low-privileged login, CVSS 5.3).", "creation_timestamp": "2026-09-11T08:15:35.289235Z"}, {"uuid": "925886b8-d957-4f3f-969e-9d15f388416f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mva72amqds2g", "content": "\ud83d\udd34 Cisco FMC CVE-2026-20079 actively exploited\n\nCritical CVSS 10.0 authentication bypass allows remote attackers with no credentials to execute commands and gain root access on Cisco Secure FMC.\n\nstemshop.top/blog/cisco-f...\n\n#CVE #CVE202620079 #Cisco #FMC #Firewall #CyberSecurity", "creation_timestamp": "2026-09-11T08:55:59.685113Z"}, {"uuid": "b2baf20e-d44e-4ec9-9c80-9a1377568863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/true_secator/8597", "content": "\u0411\u043e\u043b\u0435\u0435 36 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Plex Media, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u041d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 Plex \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043c\u0435\u0434\u0438\u0430\u0441\u0435\u0440\u0432\u0435\u0440\u044b\u00a0\u0432 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Plex Media Server \u0432\u0435\u0440\u0441\u0438\u0438 1.43.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043e\u0431\u043d\u043e\u0432\u0438\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 Plex Media Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.43.3 (\u043e\u0442 19 \u043c\u0430\u044f) \u0438 Plex Desktop \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.115.0 (\u043e\u0442 13 \u0430\u0432\u0433\u0443\u0441\u0442\u0430).\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0431\u043e\u043b\u0435\u0435 36 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Plex Media Server,\u00a0\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Plex \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Plex \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f (\u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f) \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 WatchGuard Firebox \u0438 Cisco.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e CISA \u0435\u0449\u0435 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e. \u0422\u0435\u043f\u0435\u0440\u044c \u0437\u0430 \u043d\u0435\u0435 \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2025-14733\u00a0\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430,\u00a0\u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Fireware OS 11.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 11.12.4_Update1), 12.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 12.11.5), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0439 2025.1\u20132025.1.3.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 WatchGuard\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Firebox \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 VPN IKEv2, \u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u0435\u0441\u043b\u0438 VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0444\u0438\u043b\u0438\u0430\u043b\u0430 \u0441\u043e \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0448\u043b\u044e\u0437\u043e\u043c \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043e.\n\nWatchGuard \u0442\u043e\u0433\u0434\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c IOCs, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Firebox.\n\nShadowserver \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u00a0\u0431\u043e\u043b\u0435\u0435 115 000 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Firebox \u0432 \u0441\u0435\u0442\u0438, \u0438 \u043f\u043e\u0447\u0442\u0438 9000 \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0432\u044f\u0442\u044c \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u041f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e WatchGuard \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0441\u043b\u0443\u0433\u0438 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 250 000 \u043c\u0430\u043b\u044b\u043c \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 17 000 \u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0443\u0441\u043b\u0443\u0433 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\nCisco \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-20079, \u0432 \u0435\u0435 Secure Firewall Management Center (FMC) \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u043b\u043b CVSS 10,0 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Cisco \u0442\u0430\u043a \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0438, \u043a\u0442\u043e \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u0442\u043e\u044f\u043b \u0438 \u043a\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u0438\u0447\u0435\u043c Cisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-20079 \u0435\u0449\u0435 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435, \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438 \u0440\u0430\u043d\u044c\u0448\u0435.\n\n29 \u0438\u044e\u043b\u044f Cisco\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e\u0431 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Secure FMC - CVE-2026-20316, \u043e\u0442\u043c\u0435\u0447\u0430\u044f \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e. \u0418 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0442\u043e\u0433\u0434\u0430 \u0436\u0435  \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e CVE-2026-20079, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u0432 \u043d\u0435\u0433\u043e \u0442\u0435 \u0436\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430.", "creation_timestamp": "2026-09-11T10:00:04.683815Z"}, {"uuid": "61cf7dea-d2e2-4fd8-8f48-f3c87eba2443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "content": "Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities.\n\nThe attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication bypass vulnerability in the web interface of FMC software that could allow an unauthenticated, remote attacker to bypass", "creation_timestamp": "2026-09-11T10:00:41.707279Z"}, {"uuid": "dd0ceda7-2dff-4fdd-b4ee-e64083eb8204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvaecxg3qs2n", "content": "CVE-2026-20079: Cisco FMC auth bypass, CVSS 10.0, is actively exploited. Unauthenticated root OS access. CISA KEV deadline Sep 12\u2026 https://0daynews.com/articles/2026-09-10-cisco-fmc-cve-2026-20079-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1641", "creation_timestamp": "2026-09-11T10:30:15.522461Z"}, {"uuid": "3af82b38-3ed5-4336-bb45-e5891645287c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvaehkei6s25", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\n\nState-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (F\u2026\n#hackernews #news", "creation_timestamp": "2026-09-11T10:32:48.386858Z"}, {"uuid": "ffaa4445-84b5-4717-855f-50054bdc6f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvagkfarqj27", "content": "Cisco Secure FMC: CVE-2026-20079 (CVSS 10.0) is being exploited by Sandworm and Qilin ransomware. CISA's KEV deadline is 12 Sept \u2014 patch now. https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "creation_timestamp": "2026-09-11T11:10:11.964234Z"}, {"uuid": "2b49bc3f-3182-42aa-a141-d704310524bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvaiiy5jvd2i", "content": "Cisco confirms active exploitation of CVE-2026-20079 \u2014 CVSS 10.0 FMC auth bypass granting unauthenticated root access. CISA KEV\u2026 https://0daynews.com/articles/2026-09-10-cisco-fmc-cve-2026-20079-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1642", "creation_timestamp": "2026-09-11T11:45:11.528327Z"}, {"uuid": "e781c5cd-57c4-470b-8885-5d16873ec2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mvaohguzkc2w", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316) - Help Net Security www.helpnetsecurity.com/2026/09/10/c...", "creation_timestamp": "2026-09-11T13:31:50.188024Z"}, {"uuid": "205275d3-fbae-43bc-8c1c-fb5ebd31cfbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvau5vlrgd2q", "content": "\ud83e\udd16 Cisco FMC auth bypass (CVE-2026-20079, CVSS 10.0) exploited in the wild: ransomware and state-sponsored clusters steal credentials and deploy Qilin on unpatched appliances.\nhttps://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "creation_timestamp": "2026-09-11T15:13:44.769086Z"}, {"uuid": "281382dc-4975-4eec-98eb-52f7928642b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "Cisco heeft kwetsbaarheden verholpen in Cisco Secure Firewall Management Center.  De kwetsbaarheid met kenmerk CVE-2026-20079 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Een ongeauthenticeerde externe kwaadwillende kan de authenticatiecontroles omzeilen door een onjuist systeemproces dat bij het opstarten is aangemaakt te misbruiken. De kwaadwillende kan deze kwetsbaarheid misbruiken door speciaal geprepareerde HTTP-verzoeken naar een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen verschillende scripts en commando\u2019s uit te voeren die root-toegang tot het apparaat mogelijk maken.\n\nDe kwetsbaarheid met kenmerk CVE-2026-20131 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Deze kwetsbaarheid stelt ongeauthenticeerde externe kwaadwillende in staat om willekeurige Java-code uit te voeren met root-rechten. De kwetsbaarheid wordt veroorzaakt door de onveilige deserialisatie van door de gebruiker aangeleverde Java-byte-stromen. Een kwaadwillende kan deze kwetsbaarheid misbruiken door een speciaal geprepareerd, geserialiseerd Java-object naar de webgebaseerde beheerinterface van een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen om willekeurige code op het apparaat uit te voeren en de rechten te verhogen tot root-niveau.\n\nAls de beheerinterface van Cisco Secure Firewall Management Center geen publieke internettoegang heeft, wordt het aanvalsoppervlak verkleind. Het is niet gebruikelijk om een managementinterface direct publiekelijk aan het internet bloot te stellen.\n\nIndien jouw organisatie gebruikmaakt van Cisco Security Cloud Control Firewall Management, dan betreft dit een SaaS-dienst (Software-as-a-Service) die door Cisco Systems automatisch wordt bijgewerkt als onderdeel van regulier onderhoud. Er is in dat geval geen actie van de gebruiker vereist.\n\nHet NCSC verwacht op korte termijn een publieke PoC en grootschalige pogingen tot misbruik. Het NCSC adviseert met klem de update zo spoedig mogelijk te installeren.\n\nUpdate 19-03-26: \n\nUit onderzoek van Amazon threat intelligence blijkt dat CVE-2026-20131 vermoedelijk al sinds 26 januari actief is misbruikt voor het uitrollen van Interlock ransomware. Daarnaast is er inmiddels een publieke PoC verschenen voor kwetsbaarheid CVE-2026-20079. Het is daarom van groot belang om - indien dit nog niet gedaan is - te updaten naar de nieuwste versie van Cisco Secure Firewall Management Center.\n\n**UPDATE 11-09-26:**\nCisco meldt dat succesvolle exploitatie van de kwetsbaarheid met kenmerk CVE-2026-20079 is waargenomen. Organisaties wordt geadviseerd de updates van Csco direct toe te passen en kwetsbare systemen te controleren op aanwijzingen van misbruik. Raadpleeg de blog Talos voor aanvullende aanbevelingen.  \n**EINDE UPDATE**", "creation_timestamp": "2026-09-11T16:00:47.341287Z"}, {"uuid": "79c0375d-eec4-4d2f-96ce-3243419a861a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.cert.se/2026/09/cert-se-veckobrev-v37.html", "content": "", "creation_timestamp": "2026-09-11T16:15:05.713644Z"}]}