60
Search: “Cisco Firewall Management Center”
102 stories
ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability
ZDI discloses CVE-2026-20316, a 9.8-rated unauthenticated authentication bypass in Cisco Secure Firewall Management Center login.cgi.
ZDI-26-533 describes an authentication bypass vulnerability in Cisco Secure Firewall Management Center's login.cgi that allows remote attackers to bypass authentication without any credentials. ZDI assigned a CVSS score of 9.8, and the flaw is tracked as CVE-2026-20316. As a central management plane for firewall infrastructure, compromise could enable broad policy changes.
60
ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-20242, an unauthenticated deserialization flaw in Cisco Secure Firewall Management Center enabling remote code execution (CVSS 8.1).
ZDI published advisory ZDI-26-709 describing deserialization of untrusted data in Cisco Secure Firewall Management Center's CommandSinkRmi component, tracked as CVE-2026-20242 with CVSS 8.1. Remote attackers can execute arbitrary code on affected installations without authentication. The advisory does not indicate whether exploitation has been observed in the wild.
45
60
60
Cisco FMC static credentials exploited by attackers (CVE-2026-20316)
60
60
42
60
30
35
35
60
42
Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution
60
Cisco fixed tens of vulnerabilities, including an actively exploited one
60
60
Exploited: Cisco, SharePoint, Chrome vulnerabilities
60
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs
60
Cisco warns of SD-WAN Manager exploitation, fixes 48 firewall vulnerabilities
60
60
60
60
60
60
60
Vulnerability Spotlight: Specially crafted files could lead to denial of service, information disclosure in OpenImageIO parser
60
60
Vulnerability Spotlight: Netgear Orbi router vulnerable to arbitrary command execution
60
60
60
60
Vulnerability Spotlight: Vulnerabilities in WWBN AVideo web app could lead to command injection, authentication bypass
60
60
Vulnerability Spotlight: Issue in Accusoft ImageGear could lead to memory corruption, code execution
60
60
Vulnerability Spotlight: Vulnerabilities in Open Automation Software Platform could lead to information disclosure, denial of service
60
60
57
60