Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Linked advisories
- CVE-2026-20079Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulner…
- CVE-2026-20079Cisco Secure Firewall Management Center (FMC): Umgehung der Authentifizierung über alternativen Pfad
- CVE-2026-20079Cisco Secure Firewall Management Center: Mehrere Schwachstellen
- CVE-2026-20079Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
Affected vendors and products
More on Credentials
Other advisories
- MediumCVE-2026-111495API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which can be extracted through reverse engineering. The vendor distinguis…
- Not ratedosv:CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy
- Not ratedosv:CLEANSTART-2026-XR01746In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials
- MediumCVE-2026-116689follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
- MediumCVE-2026-116689follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
- Not ratedosv:CVE-2026-62979jack: upstream error responses expose backend and peer credentials
- Not ratedosv:CVE-2026-116244pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials
- Not ratedosv:CVE-2026-119662Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend
Other news entries
- Fake OpenAI, SpaceX events used to steal Microsoft, Google accountsNewsBleepingComputer
- Zyxel patches a zero-day hiding behind an old fixNewsCSO Online
- Attackers turned OpsShield’s trusted update channel into a supply-chain attackNewsCSO Online
- Vercel rolls out new protection against stolen session cookie attacksNewsBleepingComputer
- Zyxel fixes zero-day exploited to hack nearly 1,000 network switchesNewsBleepingComputer
- NIKKE PC game launcher hacked to spread remote access, data-stealing malwareNewsBleepingComputer
- Malicious cPGuard Updates Served in OpsShield Supply Chain AttackNewsSecurityWeek
- Critical Langflow flaws enable authentication bypass and RCENewsCSO Online
Source: https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html
ID