ctrlINT What the industry said about every indicator, with the quote

CVE-2026-20316Vulnerability

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 4 independent sources · first reported by Recorded Future · last reported

Last reported 12 days ago

CISA KEVAdded 29 Jul 2026
Fix due 1 Aug 2026
Used by ransomware: knownCISA KEV catalogue
EPSS35.1%
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

6 reports, newest first · the exact sentence from each
  1. “CVE-2026-20316”

    Recorded FutureVendor
    September 2026 CVE Landscape
  2. “…6-88771 and CVE-2026-88772 in NetScaler ADC and Gateway, as well as CVE-2026-20079 in Cisco Secure Firewall Management Center (FMC), CVE-2026-20316 were confirmed.”

    AhnLab ASECVendor
    Q3 2026 Attack Techniques Trend Report
  3. “<br/>CVE: CVE-2026-20316”

    Cisco PSIRTVendor
    Cisco Secure Firewall Management Center Software Static Credential Vulnerability
  4. “…ely tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software: CVE-2026-20079 and CVE-2026-20316.”

    Cisco TalosVendor
    We've got one word for it, and it's usually the wrong one
  5. “Second, CVE-2026-20316 is a vulnerability that allows a remote attacker to log in using a low-privileged account.”

    Cisco TalosVendor
    Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
  6. “CVE-2026-20316”

    Recorded FutureVendor
    July 2026 CVE Landscape

Indicators reported together

named in the same reports

Also named with it: CVE-2026-20079, CVE-2026-39987, CVE-2026-60137, CVE-2026-63030, CVE-2021-29441, CVE-2026-88771, CVE-2026-88772, CVE-2025-49113, CVE-2026-60004, CVE-2026-33824, CVE-2024-42009, CVE-2026-15409, CVE-2026-15410, CVE-2026-25089, CVE-2026-39808, CVE-2026-42897, CVE-2025-55182, CVE-2018-0802, CVE-2022-0847, CVE-2026-35273

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-20316 here?
No account needed. We do not store your IP address.