Multiple threat actors, including state-sponsored groups and ransomware operators, are actively exploiting authentication bypass (CVE-2026-20079) and static credential (CVE-2026-20316) vulnerabilities in Cisco Secure Firewall Management Center to achieve root-level code execution and deploy malware.
exploited
Secure Firewall Management Center +1
cisco
fmc
exploitation
cve-2026-20079
cve-2026-20316
ransomware
apt
5t
2c
1i
updated