Skip to content
fr Sign in
8.2 High

CVE-2026-76413 A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC…

Description

A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An attacker could exploit this vulnerability by performing session token forgery techniques. A successful exploit could allow the attacker to log in as the administrator user and, by repeating this action, keep legitimate administrators locked out of the ASDM indefinitely.

Affected products and versions

Product Affected versions Fixed in
Cisco Secure Firewall Management Center (FMC) 10.0 10.0.0 → 10.0.1 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.7 7.7.0 → 7.7.12 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.6 7.6.0 → 7.6.5 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.4 7.4.0 → 7.4.7 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.3 7.3.0 → 7.3.1.2 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.2 7.2.0 → 7.2.11 No fix stated
Cisco Secure Firewall Management Center (FMC) 7.0 7.0.0 → 7.0.9 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Secure Firewall Management Center (FMC)

The 29 CVEs of Cisco Secure Firewall Management Center (FMC) →
CVE-2026-20342 A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote… 7.7 High CVE-2026-20323 A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD… 8.3 High CVE-2026-76412 A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote… 8.5 High CVE-2026-20333 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security… 8.8 High
Track this CVE