ZDI 2026-08-11

ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

CVE-2026-20316 +1

Machine-generated analysis · WAYSCloud LLM

Authentication can be bypassed without credentials on Cisco Secure Firewall Management Center login.cgi.

Context

The advisory concerns Cisco Secure Firewall Management Center's login.cgi component. It describes an authentication bypass that allows remote attackers to access the system without authentication. The advisory assigns a CVSS score of 9.8.

Operator considerations

Check: Verify deployment and version of Cisco Secure Firewall Management Center. Isolate: Restrict network access to the management interface until a fix is available.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco Secure Firewall Management Center. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-20316.

Read the full advisory on ZDI →