CVE-2026-20350: Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability
A ThousandEyes Virtual Appliance administrator can save crafted web-interface configuration that executes commands as root. Check and update the appliance's own software, preserving sign-in and configuration evidence rather than relying on a separate agent version.
CVE-2026-20344: Cisco Secure FMC Software SQL Injection Vulnerability
FMC Security Approver, Access Admin or Network Admin accounts can obtain database information and an Administrator's session credentials. Apply the CVE-specific fix and review these starting roles, not only full-administrator login activity.
CVE-2026-20343: Cisco Secure FMC Software Information Disclosure and Disk DoS Vulnerability
Unauthenticated FMC API requests can expose sensitive files and consume disk space until the manager becomes unresponsive. Preserve request and file evidence before cleanup, then apply the fix and assess disclosure separately from service restoration.
CVE-2026-20342: Cisco Secure FMC Software Arbitrary File Download Vulnerability
A Security Analyst or higher FMC account can retrieve arbitrary files through the download API. Apply the specific update and review download evidence; patching cannot retract files already obtained, and file writing is not established.
CVE-2026-20341: Cisco Secure FMC Software sftunnel Deserialization Root Command Execution Vulnerability
Privileged access on a managed FTD device can enable sftunnel deserialization attacks against FMC and its high-availability peer. Review managed-device trust and apply the specific fix, retaining Cisco's differing descriptions of the required privilege.
CVE-2026-20340: Cisco Secure FMC Software Deserialization Arbitrary Root Command Execution Vulnerability
Even a read-only Security Analyst account can submit an FMC web-management payload that executes as root. Review those accounts and install the CVE-specific fixed release; a read-only application role does not remove this execution risk.
CVE-2026-20336: Cisco ASA, FTD, and FMC hardening: Resource Lifetime Management Vulnerabilities
Cisco groups resource-lifetime flaws across ASA, FTD and FMC without describing an individual attack path. The article separates conflicting source scores and affected-hotfix guidance from an exploitation footnote belonging to another category.
CVE-2026-20335: Cisco ASA, FTD, and FMC hardening: Incorrect Calculation Vulnerabilities
Incorrect calculations can lead to unsafe security or resource decisions in Cisco ASA, FTD and FMC. Match the installed platform and release to the hardening guidance; the umbrella Critical rating is not a CVE-specific severity assignment.
CVE-2026-20334: Cisco ASA, FTD, and FMC hardening: Coding Standards Vulnerabilities
Cisco's coding-standard hardening entry for ASA, FTD and FMC discloses no specific defect or exploit outcome. Use the product-and-release update guidance, including ASA hotfix exceptions, instead of inferring protection from build numbering alone.
CVE-2026-20333: Cisco ASA, FTD, and FMC hardening: Incorrect Comparison Vulnerabilities
Incorrect security comparisons are grouped in this ASA, FTD and FMC hardening entry. The compared values and a specific traffic bypass remain undisclosed; use the product-specific release guidance and preserve its ASA hotfix exceptions.