Skip to content
fr Sign in
7.5 High

CVE-2026-20343 A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to…

Description

A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeatedly invoking the API. A successful exploit could allow the attacker to download sensitive files that should be restricted and consume disk space so the device could become unresponsive, causing a DoS condition.

Affected products and versions

Product Affected versions Fixed in
Cisco Secure Firewall Management Center (FMC) 10.0 10.0.0 → 10.0.1 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.7 7.7.0 → 7.7.12 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.6 7.6.0 → 7.6.5 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.4 7.4.0 → 7.4.7 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.3 7.3.0 → 7.3.1.2 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Secure Firewall Management Center (FMC)

The 29 CVEs of Cisco Secure Firewall Management Center (FMC) →
CVE-2026-20342 A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote… 7.7 High CVE-2026-20323 A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD… 8.3 High CVE-2026-76412 A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote… 8.5 High CVE-2026-20333 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security… 8.8 High
Track this CVE