erroneo.us
Search all guides⌘K

Digest · Wednesday

Security digest: March 4, 2026

1 editorial brief and 9 critical advisories.

All digests · RSS · Markdown

Take stock

  • Act now: Cisco FMC CVE-2026-20079: Exploited Pre-Auth Root Bypass. Every organization running on-premises Cisco Secure Firewall Management Center, most urgently where the FMC web interface is reachable from the internet or from broad internal networks.
  • crates.io (Rust): 4 critical advisories (dnp3times, time_calibrators, time_calibrator, zeptoclaw). Check with cargo audit.
  • Go: 3 critical advisories (github.com/zitadel/zitadel, github.com/zitadel/zitadel/v2, github.com/filebrowser/filebrowser/v2, github.com/siyuan-note/siyuan/kernel). Check with govulncheck ./....
  • Maven: 2 critical advisories (org.pac4j:pac4j-jwt, org.apache.activemq:artemis-server, org.apache.artemis:artemis-server). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId>.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Act now

· Vulnerability · CVE-2026-20079

Cisco FMC CVE-2026-20079: Exploited Pre-Auth Root Bypass

If you run an on-prem Cisco Secure FMC that is not on a September 2026 hardening release, upgrade now and check it for compromise; state and ransomware actors are using this bug to take root on the box that controls your firewalls.

Must act: Every organization running on-premises Cisco Secure Firewall Management Center, most urgently where the FMC web interface is reachable from the internet or from broad internal networks.

Can relax: Customers using only Security Cloud Control Firewall Management (patched by Cisco), and sites that manage firewalls with FDM, ASA or FTD alone, which Cisco lists as not affected.

  1. Check the version of every on-prem FMC (show version, or Help > About) and compare it with Cisco's first-fixed table.
  2. Upgrade to the hardening release for your train (7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2 or 10.1.0); earlier hot fixes are superseded.
  3. Remove any internet exposure of the FMC management interface and limit it to an admin network or jump host.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 9

GitHub-reviewed advisories rated critical, published this day (Pacific time).

crates.io (Rust) 4

Check: cargo audit

Go 3

Check: govulncheck ./...

Maven 2

Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>