Cisco confirms CVE-2026-20079 Secure FMC auth bypass exploited in attacks

Cisco confirmed active exploitation of CVE-2026-20079, a maximum-severity authentication bypass in Secure Firewall Management Center (FMC). The flaw allows unauthenticated attackers to bypass authentication, potentially gaining full control of the management plane. This is a critical supply-chain risk for enterprises using Cisco FMC, as exploitation could lead to network compromise and lateral movement.