Cisco Firepower Extensible Operating System Fxos vulnerabilities

2 CVEs affecting Cisco Firepower Extensible Operating System Fxos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20099, published 2026-02-25.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-20099, published 2026-02-25. Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to perform…
• CVE-2026-20091, published 2026-02-25. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting…