Secure Firewall Management Center
CVE-2026-20044: Cisco Secure Firewall Management Center Command Injection Vulnerability
A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 3.1 6
EPSS0.14%Chance of exploitation in 30 days
Public exploitNot tracked
FixNot yet
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.1 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.1 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.1 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.3 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.3 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.1 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.3 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 6.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.3 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.6 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.7 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.6 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.6 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.7 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.0 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.6 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.2 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.7 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.4 | See the advisory |
| Cisco Secure Firewall Management Center (FMC) 7.4 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root.
This vulnerability is due to insufficient restrictions on remediation modules while in lockdown mode. An attacker could exploit this vulnerability by sending crafted input to the system CLI of the affected device. A successful exploit could allow the attacker to run arbitrary commands or code as root, even when the system is in lockdown mode. To exploit this vulnerability, the attacker must have valid administrative credentials.
Exploitation
The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.