CVE-2026-20131 - Vulnerability Analysis

Overview

Cisco Secure Firewall Management Center contains an insecure deserialization vulnerability caused by processing user-supplied Java byte streams in the web-based management interface, letting unauthenticated remote attackers execute arbitrary Java code as root, exploit requires access to the management interface.

Severity & Score

Impact

Unauthenticated remote attackers can execute arbitrary code as root, leading to full system compromise.

Mitigation

Update to the latest available version of Cisco Secure Firewall Management Center.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner