Cisco FMC Zero-Day: Critical CISA Warning Issued

This report details a Cisco Secure Firewall Management Center (FMC) zero-day (CVE-2026-20316) that exposes static credentials on a low-privileged account, enabling unauthenticated access to sensitive management data; CISA has confirmed active exploitation and added the flaw to its KEV Catalog, requiring federal remediation by August 1, 2026. Cisco released hotfixes for multiple FMC versions, warned the issue can be chained with CVE-2026-20079 to achieve higher privileges (including potential root compromise), and identified /var/tmp/license.tmp as a potential indicator of compromise; the report recommends immediate patching, log review, account audits, and monitoring.