EUVD-2026-81126
GHSA-mxj5-v55g-6rm4
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Missing authentication gives PR:N/AC:L over the network; description confirms sensitive-file download (C:H) plus disk-exhaustion DoS (A:H), so I add the confidentiality impact the vendor vector omits.
Primary rating from Vendor (cisco).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space.
This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeatedly invoking the API. A successful exploit could allow the attacker to download sensitive files that should be restricted and consume disk space so the device could become unresponsive, causing a DoS condition.
AnalysisAI
Unauthenticated file disclosure and disk-exhaustion denial of service in Cisco Secure Firewall Management Center (FMC) let a remote attacker pull sensitive files from a critical management API that performs no authentication checks. The vendor assigns CVSS 7.5, while our independent assessment scores it higher at CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H because the same missing-authentication flaw (CWE-306) yields both confidentiality and availability impact: a single unauthenticated call can exfiltrate restricted files, and sustained repeated invocation exhausts disk until the appliance becomes unresponsive. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the affected critical API on Cisco Secure Firewall Management Center (FMC); no authentication, no user interaction, and no special configuration are needed because the API lacks authentication entirely (CWE-306). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine priority-worthy issue but with important nuance. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released fixes are documented in Cisco's security advisory (cisco-sa-fmc-mulivulns-4PsnFwvx, https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-mulivulns-4PsnFwvx); because the provided data does not enumerate an exact fixed version, administrators should open that advisory, map each deployed FMC build within the 7.3.x-7.7.x and 10.0.x ranges to the corresponding fixed software listed there, and upgrade - noting that this advisory bundles multiple FMC vulnerabilities, so a single upgrade pass can close several issues. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm which appliances run affected FMC releases (7.3.0 through 7.7.12, plus 10.0.0 and 10.0.1) and treat the management plane as the sole exposure limiter: block internet-facing access to FMC management interfaces, restrict reachability to a hardened jump-host/administrative segment, and review management-API and disk-utilization logs for anomalous or repeated unauthenticated requests. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Hardcoded static credentials in Cisco Secure Firewall Management Center (FMC) Software allow an unauthenticated remote a
Improper access control defects in Cisco Secure Firewall ASA, FTD, and FMC software allow an authenticated, low-privileg
Authenticated remote code execution as root affects Cisco Secure Firewall Management Center (FMC) software. An attacker
Multiple improper neutralization flaws in Cisco Secure Firewall ASA, Threat Defense (FTD), and Management Center (FMC) s
Improper handling of exceptional conditions across Cisco Secure Firewall ASA Software, Threat Defense (FTD) Software, an
Unauthenticated remote command execution as root affects Cisco Secure Firewall Management Center (FMC) Software that has
Authenticated attackers who already hold administrative credentials on a managed Cisco FTD device can escalate to root o
A hardening release for Cisco Secure Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (F
SQL injection in Cisco Secure FMC's web-based management interface allows an authenticated, remote attacker holding a Se
Unauthenticated attackers on an adjacent network segment can exploit multiple resource lifetime flaws (CWE-664) in Cisco
Authenticated remote code execution in Cisco Secure Firewall Management Center (FMC) lets a low-privileged web-managemen
Memory exhaustion in the sftunnel inter-device communication service of Cisco Secure Firewall Management Center (FMC) an
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today