CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2026-203165.3/MEDIUMEPSS 35.1%CISA KEV
2026-07-29

Cisco Secure Firewall Management Center (FMC) Static Credentials Vulnerability (CVE-2026-20316)

[Affected Scope] Web interface of Cisco Secure Firewall Management Center (FMC) Software

[Impact] Unauthenticated remote attackers can log in using hardcoded low-privileged credentials to access sensitive data, which can be chained with other flaws to escalate privileges

[Mitigation] Apply the official Cisco security updates immediately and restrict public internet access to the FMC management interface

CVE-2020-295839.8/CRITICALEPSS 90.1%CISA KEV
2020-12-22

Zyxel Firewalls and AP Controllers Hardcoded Admin Credentials Vulnerability (CVE-2020-29583) Analysis & Mitigation Guide

[Affected Scope] Zyxel USG, ATP, VPN, and ZyWALL series firewalls and AP controllers running ZLD firmware version 4.60

[Impact] Remote attackers can gain full administrative access to the device's SSH server or web interface using an undocumented hardcoded account ('zyfwp')

[Mitigation] Immediately upgrade to ZLD v4.60 Patch 1 or later, and restrict WAN-side access to management interfaces (SSH/HTTPS).

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse