{"metadata": {"count": 1, "page": 1, "per_page": 100}, "data": [{"uuid": "0b09dae3-91ee-4b48-96e4-f750783cc011", "vulnerability": {"vulnId": "CVE-2026-20079", "altId": []}, "gcve": {"origin_uuid": "cce329bf-df49-4c6e-a027-80be2e6483bd", "object_uuid": "0b09dae3-91ee-4b48-96e4-f750783cc011"}, "status": {"exploited": true, "status_reason": "confirmed", "status_updated_at": "2026-09-09T00:00:00+00:00"}, "timestamps": {"asserted_at": "2026-09-09T00:00:00+00:00", "recorded_at": "2026-09-10T17:00:01+00:00", "first_seen_at": "2026-09-09T00:00:00+00:00"}, "scope": {"notes": "Affected: Cisco / Cisco Secure Firewall Management Center (FMC) | Description: Vulnerability in the web interface could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. EU victimology was confirmed. Comprehensive hardening scheduled (Week of September 14th) | Patched since: 2026/08/05 | Exploitation type: ransomware | CWEs: CWE-288 | Origin source: ENISA | Notes: https://blog.talosintelligence.com/fmc-ongoing-exploitation/"}, "evidence": [{"type": "csirt_report", "source": "enisa-cnw-kev", "signal": "confirmed_compromise", "confidence": 0.75, "details": {"cwes": ["CWE-288"], "euvd": "EUVD-2026-9438", "notes": "https://blog.talosintelligence.com/fmc-ongoing-exploitation/", "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON", "product": "Cisco Secure Firewall Management Center (FMC)", "dateReported": "2026/09/09", "originSource": "ENISA", "patchedSince": "2026/08/05", "vendorProject": "Cisco", "exploitationType": ["ransomware"], "vulnerabilityName": "", "threatActorsExploiting": []}}], "references": [{"id": "CVE-2026-20079", "url": "https://www.cve.org/CVERecord?id=CVE-2026-20079"}, {"id": "EUVD-2026-9438", "url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9438"}, {"id": "source", "url": "https://blog.talosintelligence.com/fmc-ongoing-exploitation/"}]}]}