Cisco confirms zero-day exploitation of static credential vulnerability in Secure Firewall Management Center

Cisco has identified active exploitation of CVE-2026-20316, a high-severity static credential flaw in its Secure Firewall Management Center (FMC). The vulnerability allows unauthorized actors to bypass authentication, though the full scope of the compromise and the identity of the threat actors remain under investigation.