01 August 2026 - 12:17
Category: IT Fail
Hardcoded login creds in Cisco again.
CISA caught Cisco putting static web credentials into Secure FMC while hackers exploited it. Because who needs secure passwords when hotfixes exist?
Source: SOC Prime
The Full Story
Federal agencies and poor admins running Cisco Secure FMC are currently dealing with yet another grand design flaw involving static web interface credentials that let unauthenticated remote strangers drop by for sensitive data. To keep our crumbling infrastructure afloat, we are instructed to apply vendor hotfixes immediately and endlessly monitor log files for /var/tmp/license.tmp indicators before August 1, 2026. Just another lovely Tuesday applying panic patches for problems that should never have existed.