CVE Feed

    Dashboard / CVE / CVE-2026-76420

    CVE-2026-76420

    A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector at boot time. An attacker could exploit this vulnerability by sending crafted packets to the AJP connector. A successful exploit could allow the attacker to execute commands as root and gain full control over the FMC REST APIs on the affected device. Note: This vulnerability can be exploited only if the valid sftunnel connection between Cisco Secure FMC Software and Cisco Secure FTD Software is down.

    Published:Sep 16, 2026
    Last Modified:Sep 19, 2026
    EPS:Sep 16, 2026
    EPSS Score:0.00367
    CVSS Score:9

    Affected Products

    Vendor
    Cisco
    Product
    Secure Firewall Management Center

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-285 Improper Authorization

    Related CVEs

    CVE-2026-20342 (CVSS 7.7) — A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, rem…
    CVE-2026-20323 (CVSS 8.3) — A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Sec…
    CVE-2026-76412 (CVSS 8.5) — A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, …
    CVE-2026-20334 (CVSS 8.4) — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Sec…
    CVE-2026-20332 (CVSS 9.9) — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Sec…
    CVE-2026-20344 (CVSS 8.8) — A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticate…
    CVE-2026-20343 (CVSS 7.5) — A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacke…
    CVE-2026-76413 (CVSS 8.2) — A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure…
    CVE-2026-20336 (CVSS 8.8) — As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Sec…
    CVE-2026-20340 (CVSS 8.8) — A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrar…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High