CVE-2026-20002

Name of the Vulnerable Software and Affected Versions Cisco Secure FMC Software (affected versions not specified)

Description A flaw in the web-based management interface allows an authenticated remote attacker to perform SQL injection attacks. This issue stems from inadequate validation of user-supplied input. By sending crafted requests, an attacker with valid user credentials could gain full access to the database and read specific files on the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.