Quick answers
- Is CVE-2026-20342 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-20342 being exploited in the wild.
- How severe is CVE-2026-20342?
- High severity, with a CVSS score of 7.7, published 16 September 2026.
- Which products and versions are affected?
- Cisco Secure Firewall Management Center Software.
- Is there a fix for CVE-2026-20342?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-20342 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-20342?
- Check whether you run Cisco Secure Firewall Management Center Software. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
CVE-2026-20342 is an arbitrary file download vulnerability in Cisco Secure FMC Software caused by insufficient input sanitization in a specific file download API endpoint. The vulnerability requires valid credentials for a user account with at least the Security Analyst (read-only) role to exploit. An attacker with such credentials can send a crafted HTTPS request to bypass path validation and download arbitrary files from the affected system. A successful exploit allows an authenticated attacker to access sensitive files they should not have permission to retrieve. Cisco has released software updates to address this vulnerability.
Affected products
- Cisco Secure Firewall Management Center Software
Timeline
- 2026-09-16: disclosed