VulnSocial

CVE-2026-20002Disclosure(cisco / secure_firewall_management_center)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch cisco secure_firewall_management_center systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain full access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials.

cisco CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • secure_firewall_management_center

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-03-04); latest day: 1
  • 4 total mentions across 2 days

Affected systems

Vendors
cisco
Products
secure_firewall_management_center

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-03-04: 3Mentions · 2026-03-05: 1Patch / Workaround · 2026-03-05: 1Technical Details · 2026-03-04: 3Technical Details · 2026-03-05: 103-0403-05
Signal classification1 categories
Disclosure
4100.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-03-043
Disclosure3
2026-03-051
Disclosure1
Full discourse4 posts
  • dbugs@ptdbugs
    Disclosure

    CVE: CVE-2026-20002 PT-Identifier: PT-2026-22966 Vendor: Cisco Product: Cisco Secure Firewall Management Center (FMC) CVSS: 8.1 Credits: n/a Description: A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain full access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-20002 • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd #dbugs_vuln

    Post summary

    The text announces a new Cisco Secure FMC SQL injection vulnerability (CVE‑2026‑20002), describing its impact and technical details, but offers no evidence of PoC, active exploitation, or patch information.

    00010113
    551 followersView on X
  • Fernando Karl@fernandokarl
    Disclosure

    🚨 Nova vulnerabilidade CVE-2026-20002 no Cisco Secure FMC! 💻 A injeção SQL autenticada pode comprometer a confidencialidade dos dados. Atualize sua segurança agora: aplique patches e revise acessos. Proteja-se! 🔒 #CyberSecurity #InfoSec #SQLInjection https://www.tenable.com/cve/CVE-2026-20002

    Post summary

    A new authenticated SQL injection vulnerability (CVE‑2026‑20002) in Cisco Secure FMC has been disclosed; users are urged to apply patches and review access controls.

    0000060
    254 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-20002 A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on a… https://www.cve.org/CVERecord?id=CVE-2026-20002

    Post summary

    The tweet announces a SQL injection vulnerability (CVE-2026-20002) in Cisco Secure FMC software that could be exploited by authenticated remote attackers, but does not provide PoC, exploit code, patch, or evidence of active exploitation.

    00000120
    56.6K followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-20002 - High A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. Thi... https://www.thehackerwire.com/vulnerability/CVE-2026-20002/ https://t.co/YzQ6Ik6fGF

    Post summary

    The post announces CVE-2026-20002, describing a high‑severity SQL injection flaw in Cisco Secure FMC’s web interface that requires authentication.

    0000043
    121 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appciscosecure_firewall_management_center---

Explore more

Back to dashboardcisco CVEssecure_firewall_management_center vulnerabilities