HackerFeeds

CyberSecurity News

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

The Hacker News
· September 10, 2026
Vulnerabilities

AI summary

The US Cybersecurity and Infrastructure Security Agency has added three vulnerabilities to its catalog of known exploited flaws, affecting products from Cisco, Citrix, and Fortinet. One of the vulnerabilities, identified as CVE-2026-20079, has a CVSS score of 10.0 and relates to authentication. Federal agencies are required to patch these flaws by September 12, 2026. The vulnerabilities are part of the Known Exploited Vulnerabilities catalog, which tracks flaws that are being actively exploited. The affected agencies are those within the Federal Civilian Executive Branch.

Vulnerabilities mentioned

CVE-2026-20079
CRITICAL
CVSS 10
CISA KEV

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.  This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device. 

Read the full article at The Hacker Newsthehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.