Cisco Secure Firewall Management Center Software Static Credential Vulnerability
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Static%20Credential%20Vulnerability%26vs_k=1
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.
This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user.
Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.
Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh
Security Impact Rating: High
CVE: CVE-2026-20316
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Static%20Credential%20Vulnerability%26vs_k=1
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.
This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and access sensitive data as the low-privileged user.
Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.
Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that this vulnerability can be used with other Cisco Secure FMC Software vulnerabilities to elevate privileges.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh
Security Impact Rating: High
CVE: CVE-2026-20316
Cisco Advance Notification for Publication of August 5, 2026, Security Advisories
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-L4XfJg8S?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20August%205,%202026,%20Security%20Advisories%26vs_k=1
On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products:
Catalyst SD-WAN
Integrated Management Controller (IMC)
IOS Software
IOS XE Software
RoomOS
Terminal Services Agent
To fully remediate vulnerabilities to be disclosed on August 5, 2026, Cisco strongly recommends that customers upgrade to the fixed software indicated in the advisories.
For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer Focused Response to AI-Accelerated Vulnerability Discovery (https://blogs.cisco.com/security/strengthening-the-foundation-a-predictable-customer-focused-response-to-ai-accelerated-vulnerability-discovery).
Security Impact Rating: Informational
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-L4XfJg8S?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20August%205,%202026,%20Security%20Advisories%26vs_k=1
On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products:
Catalyst SD-WAN
Integrated Management Controller (IMC)
IOS Software
IOS XE Software
RoomOS
Terminal Services Agent
To fully remediate vulnerabilities to be disclosed on August 5, 2026, Cisco strongly recommends that customers upgrade to the fixed software indicated in the advisories.
For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer Focused Response to AI-Accelerated Vulnerability Discovery (https://blogs.cisco.com/security/strengthening-the-foundation-a-predictable-customer-focused-response-to-ai-accelerated-vulnerability-discovery).
Security Impact Rating: Informational
Planets, Meteors and an Eclipse: August Is Going to Be a Big Month for Skygazing
https://www.cnet.com/science/planet-parade-meteors-eclipse-august-skygazing/
The planet parade is happening around the same time as Perseids and the upcoming solar eclipse.
https://www.cnet.com/science/planet-parade-meteors-eclipse-august-skygazing/
The planet parade is happening around the same time as Perseids and the upcoming solar eclipse.
Obsbot Meet Flip Review: An Ingenious Folding 4K Webcam
https://www.cnet.com/tech/computing/obsbot-meet-flip-review-an-ingenious-folding-4k-webcam/
I like (but don’t love) this ingenious folding 4K webcam for your laptop.
https://www.cnet.com/tech/computing/obsbot-meet-flip-review-an-ingenious-folding-4k-webcam/
I like (but don’t love) this ingenious folding 4K webcam for your laptop.
Microsoft Says Workers Are Now Using Copilot AI as Much as Teams and Outlook
https://www.cnet.com/tech/services-and-software/microsoft-fiscal-year-2026-q4-earnings-agentic-ai-work/
Microsoft bet big on agentic AI, and it seems to be attracting users.
https://www.cnet.com/tech/services-and-software/microsoft-fiscal-year-2026-q4-earnings-agentic-ai-work/
Microsoft bet big on agentic AI, and it seems to be attracting users.
Today’s NYT Mini Crossword Answers for Thursday, July 30
https://www.cnet.com/tech/gaming/todays-nyt-mini-crossword-answers-for-thursday-july-30/
Here are the answers for The New York Times Mini Crossword for July 30.
https://www.cnet.com/tech/gaming/todays-nyt-mini-crossword-answers-for-thursday-july-30/
Here are the answers for The New York Times Mini Crossword for July 30.
This $98 Samsung Smart TV Might Be the Best Budget Deal You’ll See Today
https://www.cnet.com/deals/samsung-h5000f-smart-tv-deal/
The 32-inch H5000F TV is now at its lowest price ever, making it easy to add a second TV to your home.
https://www.cnet.com/deals/samsung-h5000f-smart-tv-deal/
The 32-inch H5000F TV is now at its lowest price ever, making it easy to add a second TV to your home.
Galaxy Z Fold 8 Review: A Passport-Size Shape-Shifter for Every Moment
https://www.cnet.com/tech/mobile/galaxy-z-fold-8-review/
Samsung’s reimagined book-style foldable is compact and versatile, making it the ideal device for consuming all kinds of content. It’s also just delightful to use.
https://www.cnet.com/tech/mobile/galaxy-z-fold-8-review/
Samsung’s reimagined book-style foldable is compact and versatile, making it the ideal device for consuming all kinds of content. It’s also just delightful to use.
At $850, This Shark Robot Helps You Catch The Stains You Can’t
https://www.cnet.com/deals/at-850-this-shark-robot-helps-you-catch-the-stains-you-cant/
Save $450 on Shark’s latest robot vacuum, now $850, with UV Stain Detect, HyperSonic mopping and a self-cleaning dock.
https://www.cnet.com/deals/at-850-this-shark-robot-helps-you-catch-the-stains-you-cant/
Save $450 on Shark’s latest robot vacuum, now $850, with UV Stain Detect, HyperSonic mopping and a self-cleaning dock.
This Unbelievable One-Day Deal Knocks Over 60% Off a Rugged Pelican Backpack
https://www.cnet.com/deals/pelican-18l-aegis-backpack-deal-2026-07-30/
You’ve only got a few hours left to grab the 18-liter Aegis travel backpack for just $70.
https://www.cnet.com/deals/pelican-18l-aegis-backpack-deal-2026-07-30/
You’ve only got a few hours left to grab the 18-liter Aegis travel backpack for just $70.
B&H Photo Just Knocked $100 Off a 4TB SanDisk SSD That You Can Take Practically Anywhere
https://www.cnet.com/deals/sandisk-extreme-portable-ssd-deal-7-30-26/
It’s protected against water, dust and drops, and you can pick it up for $800 right now.
https://www.cnet.com/deals/sandisk-extreme-portable-ssd-deal-7-30-26/
It’s protected against water, dust and drops, and you can pick it up for $800 right now.
CNET Readers Are Convinced Apple Has a Foldable iPhone Coming. But What About Smart Glasses?
https://www.cnet.com/tech/cnet-readers-are-convinced-apple-has-a-foldable-iphone-coming-but-what-about-smart-glasses/
Here’s what CNET readers predict Apple will do this fall.
https://www.cnet.com/tech/cnet-readers-are-convinced-apple-has-a-foldable-iphone-coming-but-what-about-smart-glasses/
Here’s what CNET readers predict Apple will do this fall.
LinkedIn Added a New Way to Report AI Slop
https://www.cnet.com/tech/services-and-software/linkedin-ai-slop-button-news/
The “Seems like AI slop” button will help LinkedIn train its AI-detection tools.
https://www.cnet.com/tech/services-and-software/linkedin-ai-slop-button-news/
The “Seems like AI slop” button will help LinkedIn train its AI-detection tools.
Scotland and First-Person Screams Are Silent Hill: Townfall’s New Direction of Intimate Horror
https://www.cnet.com/tech/gaming/silent-hill-townfall-new-direction-intimate-horror-scotland/
A hands-on preview of a smaller, more intimate Silent Hill game — with the ambiguous psychological horror fans expect.
https://www.cnet.com/tech/gaming/silent-hill-townfall-new-direction-intimate-horror-scotland/
A hands-on preview of a smaller, more intimate Silent Hill game — with the ambiguous psychological horror fans expect.
Walmart Deals of the Day: Hit the Ground Running With $71 Off a Garmin Fitness Tracker
https://www.cnet.com/deals/walmart-deals-of-the-day-july-30-2026/
Plus, $40 off top-rated Anker running earbuds and a Roomba robot vacuum that’s nearly half price.
https://www.cnet.com/deals/walmart-deals-of-the-day-july-30-2026/
Plus, $40 off top-rated Anker running earbuds and a Roomba robot vacuum that’s nearly half price.
Most Smart Fitness Devices Lack Essential Data Protection, EFF Warns
https://www.cnet.com/news/privacy/most-smart-fitness-devices-lack-essential-data-protection-eff-warns/
Health trackers collect some of our most private information, but data security is spotty among leading smartwatches, smart rings and other devices.
https://www.cnet.com/news/privacy/most-smart-fitness-devices-lack-essential-data-protection-eff-warns/
Health trackers collect some of our most private information, but data security is spotty among leading smartwatches, smart rings and other devices.
I Used Every AI Cheating App and Detector and Came to One Conclusion
https://www.cnet.com/tech/services-and-software/i-used-every-ai-cheating-app-and-detector-and-came-to-one-conclusion/
Can AI judge human work from robot slop, or is every AI-detection tool out there completely worthless?
https://www.cnet.com/tech/services-and-software/i-used-every-ai-cheating-app-and-detector-and-came-to-one-conclusion/
Can AI judge human work from robot slop, or is every AI-detection tool out there completely worthless?
Spotify Launches Running Mode With Customizable Playlists and Coaching
https://www.cnet.com/tech/services-and-software/spotify-launches-running-mode-with-customizable-playlists-and-coaching/
The company’s latest fitness feature is designed to keep runners moving with a tailored audio experience.
https://www.cnet.com/tech/services-and-software/spotify-launches-running-mode-with-customizable-playlists-and-coaching/
The company’s latest fitness feature is designed to keep runners moving with a tailored audio experience.
Banning Open-Source AI Models to Protect Our Cybersecurity May Do the Opposite
https://www.cnet.com/tech/services-and-software/open-source-ai-model-ban-proposal-cybersecurity-risks-news/
A ban on open Chinese AI models under the guise of security might actually put our cybersecurity more at risk.
https://www.cnet.com/tech/services-and-software/open-source-ai-model-ban-proposal-cybersecurity-risks-news/
A ban on open Chinese AI models under the guise of security might actually put our cybersecurity more at risk.
Samsung Says It’s Launching Galaxy S26 FE and Tab S12 Later This Year
https://www.cnet.com/tech/mobile/samsung-says-its-launching-galaxy-s26-fe-and-tab-s12-later-this-year/
The devices are joining foldables in the company’s growing lineup.
https://www.cnet.com/tech/mobile/samsung-says-its-launching-galaxy-s26-fe-and-tab-s12-later-this-year/
The devices are joining foldables in the company’s growing lineup.
Tim Cook’s Final Earnings Call: Record iPhone Sales and Future Pricing Woes
https://www.cnet.com/tech/tim-cook-final-apple-earnings-call-iphone-sales-pricing-woes/
In his last earnings call as Apple’s CEO, Cook signals potential pricing headwinds due to the ongoing RAM shortage.
https://www.cnet.com/tech/tim-cook-final-apple-earnings-call-iphone-sales-pricing-woes/
In his last earnings call as Apple’s CEO, Cook signals potential pricing headwinds due to the ongoing RAM shortage.