CVE-2026-76412

A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error when checking the privilege level of a user who is invoking remote diagnostics. An attacker could exploit this vulnerability by authenticating to the device, either through the web-based management interface or the REST API, and using the remote diagnostics debugger to grant a user elevated privileges. A successful exploit could allow the attacker to elevate privileges to root. Notes: To exploit this vulnerability, the attacker must have valid user credentials on the affected device. The CVSSv3.1 Attack Complexity is High due to the multistage process required to fully exploit this vulnerability.

• CWE-264

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc2-multivulns-HXgcqRG

Published

Sep 16, 2026

Last Modified

Sep 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76402In Splunk Connect for Kafka versions below 2.2.7, an unauthe…8.2
• CVE-2026-76403In Splunk Connect for Kafka versions below 2.2.7, an unauthe…7.4
• CVE-2026-76404In Splunk MCP Server app versions below 1.2.1, a user who ho…9.1
• CVE-2026-76405In Splunk On-Call (VictorOps) app versions below 1.0.43 on S…4.3
• CVE-2026-76409As part of Cisco's ongoing commitment to proactive security …8.8
• CVE-2026-7641The Import and export users and customers plugin for WordPre…8.8
• CVE-2026-76413A vulnerability in Cisco Adaptive Security Device Manager (A…8.2
• CVE-2026-7642A vulnerability was detected in pskill9 website-downloader u…6.3
• CVE-2026-76420A vulnerability in the internal configuration of the Apache …9
• CVE-2026-76423A vulnerability in the REST API of Cisco ISE and Cisco ISE-P…10
• CVE-2026-76424A vulnerability in the REST API of Cisco ISE could allow an …7.2
• CVE-2026-76425A vulnerability in the APIs of Cisco ISE could allow an auth…7.6