cisco-sa-fmc-cmd-inject-S9ZM4EJfMediumCVSS 6.0

Cisco Secure Firewall Management Center Software Command Injection Vulnerability

Published
March 4, 2026
Last Modified
March 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-20044 →

📋 Description

A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root.

This vulnerability is due to insufficient restrictions on remediation modules while in lockdown mode. An attacker could exploit this vulnerability by sending crafted input to the system CLI of the affected device. A successful exploit could allow the attacker to run arbitrary commands or code as root, even when the system is in lockdown mode. To exploit this vulnerability, the attacker must have valid administrative credentials.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is part of the March 2026 release of the Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: March 2026 Semiannual Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75736"].

CVE-2026-20044 — Cisco Secure Firewall Management Center Command Injection Vulnerability (CVSS 3.1 6.0, CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)

🎯 Affected products81

  • Cisco Secure Firewall Management Center (FMC)
  • Cisco Secure Firewall Management Center (FMC) Appliances
  • Cisco Secure Firewall Management Center (FMC) 6.4.0
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.1
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.10
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.11
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.12
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.13
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.14
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.15
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.16
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.17
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.18
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.2
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.3
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.4
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.5
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.6
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.7
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.8
  • Cisco Secure Firewall Management Center (FMC) 6.4.0.9
  • Cisco Secure Firewall Management Center (FMC) 7.0.0
  • Cisco Secure Firewall Management Center (FMC) 7.0.0.1
  • Cisco Secure Firewall Management Center (FMC) 7.0.1
  • Cisco Secure Firewall Management Center (FMC) 7.0.1.1
  • Cisco Secure Firewall Management Center (FMC) 7.0.2
  • Cisco Secure Firewall Management Center (FMC) 7.0.2.1
  • Cisco Secure Firewall Management Center (FMC) 7.0.3
  • Cisco Secure Firewall Management Center (FMC) 7.0.4
  • Cisco Secure Firewall Management Center (FMC) 7.0.5
  • +51 more not shown

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address this vulnerability.

🔗 References (4)