CVE-2026-20079
exploited in the wild☆ pinCVSS
10.0
Reports
14
First seen
Mar 11, 2026
Last seen
Oct 13, 2026
Affected product
Cisco Secure Firewall Management Center
Associated actors
UAT-11988 ×3UAT-12197 ×3Sandworm ×3UAT-11823 ×3Qilin ×2NightEagle ×1Optimus_Prime ×1Red Heron ×1Russian-speaking threat actor ×1Settra ×1ShinyHunters ×1Suspected Chinese-speaking threat actor ×1Suspected Russian-speaking threat actor ×1UAT-10820 ×1UNC3569 ×1Vectra ×1Black Axe ×1Void Blizzard ×1CL-CRI-1131 ×1CL-CRI-1163 ×1
Recent reports
Critical