Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerability

Summary

CVE	CVE-2026-76420
State	PUBLISHED
Assigner	cisco
Source Priority	CVE Program / NVD first with legacy fallback
Published	2026-09-16 17:18:09 UTC
Updated	2026-09-17 04:18:01 UTC
Description	A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of encryption parameters for the AJP connector at boot time. An attacker could exploit this vulnerability by sending crafted packets to the AJP connector. A successful exploit could allow the attacker to execute commands as root and gain full control over the FMC REST APIs on the affected device. Note: This vulnerability can be exploited only if the valid sftunnel connection between Cisco Secure FMC Software and Cisco Secure FTD Software is down.

Risk And Classification

Primary CVSS: v3.1 9 CRITICAL from [email protected]

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Problem Types: CWE-285 | CWE-285 Improper Authorization

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Secondary	9	CRITICAL	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H`
3.1	CNA	CVSSV3_1	9	CRITICAL	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H`

CVSS v3.1 Breakdown

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.0	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.0.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.1.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.2	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.0	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.2.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.3	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.0.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.4	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.5	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.3.0	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.2	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.3.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.3	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.3.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.4	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.6	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.4.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.5	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.3.1.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.0	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.6.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.5.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.6	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.1.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.6.2	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.7	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.5.2	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.3.1.2	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.8	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.6.0	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.2	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.8.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.6.3	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.2.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.9	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.7	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.7.0	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.2.2	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.10	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.6.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.2.3	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.8	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.6.2	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.7.10	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.10.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.8.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.6.2.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.10.2	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.7.10.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.2.4	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.3	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.6.3	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.7.11	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.6.4	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 10.0.0	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.4	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.5	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.0.9	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.2.11	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.7.12	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.6.5	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.6	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 10.0.1	Not specified
CNA	Cisco	Cisco Secure Firewall Management Center FMC	affected 7.4.7	Not specified

References

Reference	Source	Link	Tags
sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc2-m...	[email protected]	sec.cloudapps.cisco.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Additional Advisory Data

Exploits

CNA: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

There are currently no legacy QID mappings associated with this CVE.