Cisco FMC Zero-Day Actively Exploited, Added to CISA KEV Catalog

CISA added CVE-2026-20316, a vulnerability in Cisco Secure Firewall Management Center (FMC) Software, to its Known Exploited Vulnerabilities catalog following reports of zero-day exploitation.

The flaw, rated 5.3 on CVSS, could allow an unauthenticated remote attacker to access sensitive data via static credentials, per The Hacker News. Organizations running Cisco FMC should apply available patches and treat this as an active-exploitation priority regardless of the moderate CVSS score.