Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

CISA mitigation guidance for CISA Adds Cisco Secure FMC CVE-2026-20079 to KEV Sets Sept. 12 Deadline

Advisory/Mitigation
First reported
Last updated
Happening score
H score 58
2 unique sources, 4 articles

Summary

Hide ▲

CISA added CVE-2026-20079 to the KEV catalog and gave Federal Civilian Executive Branch agencies a September 12, 2026 deadline to secure affected Cisco Secure FMC systems. Cisco says the authentication bypass in Cisco Secure Firewall Management Center (FMC) Software is actively exploited and can let an unauthenticated remote attacker execute script files and gain root access. Cisco says there are no workarounds, advises customers to upgrade to the latest software release, and tells organizations that find indicators of compromise to contact Cisco TAC.

Related Happenings

Arista mitigation guidance for Arista VeloCloud Orchestrator compensating controls for CVE-2026-93952

Advisory/Mitigation
H score53 First: 22.09.2026 15:29 Last: 22.09.2026 15:29 Sources 1

About this happening: Arista issued temporary mitigation steps for exposed VeloCloud Orchestrator (VCO) deployments while a fixed release is pending, limiting the risk from actively exploited...

Open Happening

Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) Catalog ordered federal agencies to patch systems against CVE-2026-76460 for within

Public Sector Action
H score37 First: 17.09.2026 10:20 Last: 17.09.2026 10:20 Sources 1

How related: CISA added the flaw to the KEV catalog on the same day Cisco disclosed it as it was already exploited in attacks.

About this happening: CISA added CVE-2026-76460 to the Known Exploited Vulnerabilities (KEV) Catalog and ordered federal agencies to patch affected systems within three days after C...

Open Happening

Cisco ISE and ISE-PIC actively exploited authentication bypass (CVE-2026-76460)

Vulnerability
H score51 First: 17.09.2026 10:20 Last: 17.09.2026 10:20 Sources 1

How related: CISA added the flaw to the KEV catalog on the same day Cisco disclosed it as it was already exploited in attacks.

About this happening: Cisco ISE and Cisco ISE-PIC are facing CVE-2026-76460, a maximum-severity API authentication bypass that is actively exploited in the wild. The flaw lets remot...

Open Happening

Cisco Secure Email Gateway insufficient validation flaw (CVE-2026-76461)

Vulnerability
H score45 First: 15.09.2026 09:11 Last: 15.09.2026 09:11 Sources 1

About this happening: Cisco Secure Email Gateway devices are exposed to CVE-2026-76461, an actively exploited email-parsing flaw that can let an unauthenticated remote attacker execute...

Open Happening

Check Point VPN certificate mitigation guidance

Advisory/Mitigation
H score53 First: 10.09.2026 14:45 Last: 10.09.2026 14:45 Sources 1

About this happening: Check Point directed affected customers to Live Patch or the latest Jumbo Hotfix for its VPN certificate flaws, with rollout beginning on September 9. The guidance...

Open Happening

Timeline

  1. 10.09.2026 00:40 5 articles · 13d ago

    CISA mitigation guidance for CISA KEV remediation order for Cisco Secure FMC CVE-2026-20079

    Initial Disclosure

    CISA added CVE-2026-20079 to the KEV catalog and gave Federal Civilian Executive Branch agencies a September 12, 2026 deadline to secure affected Cisco FMC systems.

    Show sources
    Open in new tab