Cisco has released security updates to address multiple vulnerabilities across its products, including a critical issue identified as CVE-2026-20079 in Secure Firewall Management Center (FMC). These vulnerabilities could allow attackers to compromise affected systems.

Affected products include but are not limited to:

• Cisco IOS XR Software

• Cisco Secure Firewall Management Center Software

• Cisco Secure Email Secure/Multipurpose Internet Mail Extensions 

• Cisco Nexus 9000 Series Switches

• Cisco Desk Phone 9800 Series, IP Phone 7800/8800 Series and Video Phone 8875

Security Risks

The identified vulnerabilities pose a severe security risk, as they may allow attackers to gain unauthorized access, execute arbitrary code, or obtain sensitive information. Leveraging these vulnerabilities could result in full system compromise and disruption of essential operations.

 For the full list of security patches released by Cisco, please refer to Cisco Security Advisories.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

• Follow and put in place the security updates shared by Cisco to lower the risk of vulnerability exploitation.

• Before updating or patching, please ensure that you have the latest backup that can easily be restored.

For further information and support, please contact the National Cyber Security Authority (NCSA) by email to rwcsirt@ncsa.gov.rw or call us on 9009.

References

• https://sec.cloudapps.cisco.com/security/center/publicationListing.x

• Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

• Cisco Security portal