Cisco Secure FMC && hard-coded password exploited in Zero-Day attacks

A critical zero-day (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC) allows unauthenticated attackers to use static low-privileged credentials to log in to affected systems. Cisco has released hotfixes for multiple FMC releases and advises immediate patching, reviewing /var/log/messages for entries referencing /var/tmp/license.tmp, rotating credentials and certificates if compromised, and ensuring the FMC management interface is not exposed to the public internet.