Free practical cybersecurity guidance for organisations without a security team.
hello@actionsoncyber.com
Actions On Cyber logo
Contact
← Back to Vulnerability Briefs

Critical Cisco Firewall Management Flaw Could Let Attackers Take Control

A serious security flaw has been found in Cisco's Secure Firewall Management Center and Security Cloud Control Firewall Management. This flaw lets attackers bypass login controls and run harmful commands, potentially taking full control of the firewall device. Because firewalls protect your network, this vulnerability is critical and has been actively exploited.

10 September 2026

Reference: CVE-2026-20079

1. What is being reported?

The report describes a security weakness in Cisco's firewall management software that allows someone to skip the usual login process and run scripts on the device. This happens because of a problem in how the system starts up, which attackers can exploit by sending specially crafted web requests. If successful, the attacker gains full administrative access to the firewall.

2. What this means in plain English

For a small organisation, this means that if you use Cisco's affected firewall management products, attackers could potentially take over your firewall without needing a password. This could let them bypass your network protections, access sensitive data, or disrupt your services.

3. Could this affect a small business?

Small businesses using Cisco Secure Firewall Management Center or Security Cloud Control Firewall Management could be at risk, especially if these devices are connected to the internet or not fully updated. Organisations not using these specific Cisco products or using different firewall solutions are unlikely to be affected.

4. What to do now

  • Check if your organisation uses Cisco Secure Firewall Management Center or Security Cloud Control Firewall Management.
  • Contact your IT provider or Cisco support to confirm if your devices are affected and to get the latest security updates or mitigations.
  • Apply all recommended patches or mitigations from Cisco as soon as possible to protect your firewall devices.
  • Review your firewall’s internet exposure and consider limiting access to management interfaces to trusted networks only.

5. Ask your IT provider

Can you confirm whether our Cisco firewall management devices are affected by CVE-2026-20079, and have all necessary security updates or mitigations been applied?

6. Bottom line

If you use Cisco firewall management products, act quickly to ensure they are updated and protected against this critical vulnerability.

Information based on CISA KEV, NVD, and multiple reputable security news reports.

Back to Vulnerability Briefs