CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Secure Firewall Management Center (FMC) Static Credentials Vulnerability (CVE-2026-20316)
[Affected Scope] Web interface of Cisco Secure Firewall Management Center (FMC) Software
[Impact] Unauthenticated remote attackers can log in using hardcoded low-privileged credentials to access sensitive data, which can be chained with other flaws to escalate privileges
[Mitigation] Apply the official Cisco security updates immediately and restrict public internet access to the FMC management interface
Cisco Smart Licensing Utility (CSLU) Static Administrative Credentials Vulnerability (CVE-2024-20439) Analysis and Hardening Guide
[Affected Scope] Cisco Smart Licensing Utility (CSLU) versions prior to 2.3.0
[Impact] Unauthenticated remote attackers can gain full administrative access to the CSLU application API using hardcoded static credentials
[Mitigation] Immediately upgrade CSLU to version 2.3.0 or later, and restrict external access to the CSLU API ports using firewalls