CVE-2026-20002 - Vulnerability Analysis

Overview

Cisco Secure FMC Software contains a SQL injection caused by inadequate validation of user-supplied input in the web-based management interface, letting authenticated remote attackers access the database and read certain OS files.

Severity & Score

Impact

Authenticated attackers can access the database fully and read certain files on the underlying operating system.

Mitigation

Update to the latest version of Cisco Secure FMC Software.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner