High severity · published Sep 16, 2026
CVE-2026-76413
Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerability
8.2
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user.
This vulnerability is due to improper management of the Cisco ASDM SSO token. An attacker could exploit this vulnerability by performing session token forgery techniques. A successful exploit could allow the attacker to log in as the administrator user and, by repeating this action, keep legitimate administrators locked out of the ASDM indefinitely.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cisco Secure Firewall Management Center (FMC) · Cisco
7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more · source: vendor
Affected product
CS
Cisco Secure Firewall Management Center (FMC)
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-76413
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-76413
sec.cloudapps.cisco.com
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc2-multivulns-HXgcqRG
More from Cisco Secure Firewall Management Center (FMC)
10.0
CVE-2026-20131
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
10.0
CVE-2026-20079
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
5.3
CVE-2026-20316
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
9.9
CVE-2026-20332
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities
9.9
CVE-2026-20324
Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability
