CISA Orders Federal Agencies to Patch Maximum-Severity Cisco FMC Vulnerability by March 22

CISA ordered federal agencies to patch CVE-2026-20131, a maximum-severity vulnerability in Cisco Secure Firewall Management Center allowing remote code execution. The deadline is today, March 22. Oracle also released patches for CVE-2026-21992 (CVSS 9.8) in Identity Manager and Web Services Manager.