CVE Feed

    Dashboard / CVE / CVE-2026-20343

    CVE-2026-20343

    A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeatedly invoking the API. A successful exploit could allow the attacker to download sensitive files that should be restricted and consume disk space so the device could become unresponsive, causing a DoS condition.

    Published:Sep 16, 2026
    Last Modified:Sep 19, 2026
    EPS:Sep 16, 2026
    EPSS Score:0.0045
    CVSS Score:7.5

    Affected Products

    Vendor
    Cisco
    Product
    Secure Firewall Management Center

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-20342 (CVSS 7.7) — A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, rem…
    CVE-2026-20323 (CVSS 8.3) — A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Sec…
    CVE-2026-76412 (CVSS 8.5) — A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, …
    CVE-2026-20334 (CVSS 8.4) — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Sec…
    CVE-2026-20332 (CVSS 9.9) — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Sec…
    CVE-2026-20344 (CVSS 8.8) — A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticate…
    CVE-2026-76413 (CVSS 8.2) — A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure…
    CVE-2026-20336 (CVSS 8.8) — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Sec…
    CVE-2026-20340 (CVSS 8.8) — A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrar…
    CVE-2026-20335 (CVSS 8.1) — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Sec…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High