Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-20343

Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeatedly invoking the API. A successful exploit could allow the attacker to download sensitive files that should be restricted and consume disk space so the device could become unresponsive, causing a DoS condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Secure Firewall Management Center (FMC)

Default version status: unknown

  • 7.3.0affected
  • 7.3.1affected
  • 7.3.1.1affected
  • 7.4.0affected
  • 7.4.1affected
  • 7.4.1.1affected
  • 7.3.1.2affected
  • 7.6.0affected
  • 7.4.2affected
  • 7.4.2.1affected
  • 7.7.0affected
  • 7.4.2.2affected
  • 7.6.1affected
  • 7.4.2.3affected
  • 7.6.2affected
  • 7.7.10affected
  • 7.6.2.1affected
  • 7.7.10.1affected
  • 7.4.2.4affected
  • 7.4.3affected
  • 7.6.3affected
  • 7.7.11affected
  • 7.6.4affected
  • 10.0.0affected
  • 7.4.4affected
  • 7.4.5affected
  • 7.7.12affected
  • 7.6.5affected
  • 7.4.6affected
  • 10.0.1affected
  • 7.4.7affected

References