Search: “Secure Firewall Management Center”

61 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 243 Ransomware 138 Malware 123 Exploit / PoC 90 Industry 68 Policy & legal 63 Data breach 50 Threat actor 46 Advisory 21 AI tools & infra 17 Phishing & fraud 13 Research 7 Tools 6 AI industry 5

SeverityAll critical 438 high 208 medium 142 low 60 info 50

ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

ZDI discloses CVE-2026-20316, a 9.8-rated unauthenticated authentication bypass in Cisco Secure Firewall Management Center login.cgi.

ZDI-26-533 describes an authentication bypass vulnerability in Cisco Secure Firewall Management Center's login.cgi that allows remote attackers to bypass authentication without any credentials. ZDI assigned a CVSS score of 9.8, and the flaw is tracked as CVE-2026-20316. As a central management plane for firewall infrastructure, compromise could enable broad policy changes.

ZDI Published AdvisoriesAug 11, 05:00 UTC · Aug 11, 2026Vulnerability CVE-2026-20316

ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI disclosed CVE-2026-20242, an unauthenticated deserialization flaw in Cisco Secure Firewall Management Center enabling remote code execution (CVSS 8.1).

ZDI published advisory ZDI-26-709 describing deserialization of untrusted data in Cisco Secure Firewall Management Center's CommandSinkRmi component, tracked as CVE-2026-20242 with CVSS 8.1. Remote attackers can execute arbitrary code on affected installations without authentication. The advisory does not indicate whether exploitation has been observed in the wild.

ZDI Published Advisoriesupdated Sep 16, 16:00 UTC · 12h agofirst Sep 16, 05:00 UTC · 23h agoVulnerability 7 sources CVE-2026-20242

Memory corruption vulnerability in Mitsubishi PLC could lead to DoS, code execution

Cisco TalosMay 26, 19:36 UTC · May 26, 2023Vulnerability in the wildCVE-2023-1424

Vulnerability Spotlight: Authentication bypass, use-after-free vulnerabilities found in a library for the µC/OS open

Cisco TalosMay 10, 15:44 UTC · May 10, 2023Vulnerability in the wildCVE-2022-41985 CVE-2022-46377 CVE-2022-46378

Vulnerability Spotlight: Vulnerabilities in IBM AIX could lead to command injection with elevated privileges

Cisco TalosApr 24, 14:59 UTC · Apr 24, 2023Vulnerability in the wildCVE-2023-26286 CVE-2023-28528

Vulnerability Spotlight: Hard-coded password vulnerability could allow attacker to completely take over Lenovo Smart Clock

Cisco TalosApr 13, 14:39 UTC · Apr 13, 2023Vulnerability in the wildCVE-2023-0896

Vulnerability Spotlight: Vulnerabilities in popular Japanese word processing software could lead to arbitrary code execution, other issues

Cisco TalosApr 5, 15:23 UTC · Apr 5, 2023Vulnerability in the wildCVE-2022-43664 CVE-2023-22660 CVE-2023-22291+1 CVEs

Vulnerability Spotlight: Vulnerability in ManageEngine OpManager could lead to XXE attack

Cisco TalosMar 30, 19:00 UTC · Mar 30, 2023Vulnerability in the wildCVE-2022-43473

Vulnerability Spotlight: Specially crafted files could lead to denial of service, information disclosure in OpenImageIO parser

Cisco TalosMar 30, 16:00 UTC · Mar 30, 2023Vulnerability in the wildCVE-2023-24473 CVE-2023-22845 CVE-2023-24472+2 CVEs

Vulnerability Spotlight: SNIProxy contains remote code execution vulnerability

Cisco TalosMar 30, 14:35 UTC · Mar 30, 2023Vulnerability in the wildCVE-2023-25076

Vulnerability Spotlight: Netgear Orbi router vulnerable to arbitrary command execution

Cisco TalosMar 21, 17:50 UTC · Mar 21, 2023Vulnerability in the wildCVE-2022-37337 CVE-2022-38452 CVE-2022-36429+1 CVEs

Vulnerability Spotlight: WellinTech ICS platform vulnerable to information disclosure, buffer overflow vulnerabilities

Cisco TalosMar 21, 13:27 UTC · Mar 21, 2023Vulnerability in the wildCVE-2022-45124 CVE-2022-43663

Vulnerability Spotlight: Node-SQLite3 issue could lead to denial of service in Ghost CMS

Cisco TalosMar 16, 18:32 UTC · Mar 16, 2023Vulnerability in the wildCVE-2022-43441

Vulnerability Spotlight: Vulnerabilities in WWBN AVideo web app could lead to command injection, authentication bypass

Cisco TalosAug 16, 15:54 UTC · Aug 16, 2022Vulnerability in the wildCVE-2022-32777 CVE-2022-32778 CVE-2022-32761+14 CVEs

Vulnerability Spotlight: Vulnerabilities in Alyac antivirus program could stop virus scanning, cause code execution

Cisco TalosAug 3, 18:46 UTC · Aug 3, 2022Vulnerability in the wildCVE-2022-21147 CVE-2022-32543 CVE-2022-298861

Vulnerability Spotlight: Issue in Accusoft ImageGear could lead to memory corruption, code execution

Cisco TalosJul 19, 12:45 UTC · Jul 19, 2022Vulnerability in the wildCVE-2022-294651

Vulnerability Spotlight: Adobe Acrobat DC use-after-free issues could lead to arbitrary code execution

Cisco TalosJul 13, 15:49 UTC · Jul 13, 2022Vulnerability in the wildCVE-2022-34221 CVE-2022-34230

Vulnerability Spotlight: Vulnerabilities in Open Automation Software Platform could lead to information disclosure, denial of service

Cisco TalosMay 25, 15:18 UTC · May 25, 2022Vulnerability in the wildCVE-2022-26082 CVE-2022-26833 CVE-2022-27169+5 CVEs

Vulnerability Spotlight: Multiple memory corruption vulnerabilities in NVIDIA GPU driver

Cisco TalosMay 17, 14:55 UTC · May 17, 2022Vulnerability in the wildCVE-2022-28181 CVE-2022-28182

Vulnerability Spotlight: How an attacker could chain several vulnerabilities in an industrial wireless router to gain root access

Cisco TalosMay 12, 12:00 UTC · May 12, 2022Vulnerability in the wild

Vulnerability Spotlight: Vulnerability in Alyac antivirus program could stop virus scanning, cause denial of service

Cisco TalosMay 10, 14:20 UTC · May 10, 2022Vulnerability in the wildCVE-2022-21147

Vulnerability Spotlight: Two vulnerabilities in Accusoft ImageGear could lead to DoS, arbitrary free

Cisco TalosMay 2, 18:42 UTC · May 2, 2022Vulnerability in the wildCVE-2022-23400 CVE-2022-22137

Vulnerability Spotlight: Heap overflow in Sound Exchange libsox library

Cisco TalosMar 23, 20:07 UTC · Mar 23, 2022Vulnerability in the wildCVE-2021-40426

Vulnerability Spotlight: Vulnerabilities in Gerbv could lead to code execution, information disclosure

Cisco TalosFeb 24, 14:00 UTC · Feb 24, 2022Vulnerability in the wildCVE-2021-40391 CVE-2021-40393 CVE-2021-40394+4 CVEs

Vulnerability Spotlight: Vulnerabilities in Lansweeper could lead to JavaScript, SQL injections

Cisco TalosFeb 24, 12:00 UTC · Feb 24, 2022Vulnerability in the wildCVE-2022-22149 CVE-2022-21234 CVE-2022-21210+1 CVEs

Vulnerability Spotlight: Buffer overflow vulnerabilities in Accusoft ImageGear could lead to code execution

Cisco TalosFeb 23, 16:58 UTC · Feb 23, 2022Vulnerability in the wildCVE-2021-21914 CVE-2021-21938 CVE-2021-21939+7 CVEs1

Vulnerability Spotlight: Vulnerability in Hancom Office could lead to memory corruption, code execution

Cisco TalosFeb 16, 19:09 UTC · Feb 16, 2022Vulnerability in the wildCVE-2021-219581

Vulnerability Spotlight: Vulnerabilities in Moxa MXView could allow attacker to view sensitive information, bypass login

Cisco TalosFeb 11, 21:22 UTC · Feb 11, 2022Vulnerability in the wildCVE-2021-40392 CVE-2021-40390

Vulnerability Spotlight: Multiple vulnerabilities in Sealevel SeaConnect

Cisco TalosFeb 2, 12:00 UTC · Feb 2, 2022Vulnerability in the wildCVE-2021-21960 CVE-2021-21961 CVE-2021-21962+10 CVEs

Vulnerability Spotlight: WiFi-connected security camera could be manipulated to spy on communications, among other malicious actions

Cisco TalosJan 26, 21:09 UTC · Jan 26, 2022Vulnerability in the wildCVE-2021-44354 CVE-2021-44419 CVE-2021-40405+14 CVEs

Vulnerability Spotlight: Vulnerability in Apple iOS, iPad OS and MacOS could lead to disclosure of sensitive memory data

Cisco TalosJan 25, 17:31 UTC · Jan 25, 2022Vulnerability in the wildCVE-2021-30939

Vulnerability Spotlight: Two vulnerabilities in Adobe Acrobat DC could lead to arbitrary code execution

Cisco TalosJan 11, 17:09 UTC · Jan 11, 2022Vulnerability in the wildCVE-2021-44710 CVE-2021-44711

Vulnerability Spotlight: Vulnerabilities in metal detector peripheral could allow attackers to manipulate security devices

Cisco TalosDec 20, 16:11 UTC · Dec 20, 2021Vulnerability in the wildCVE-2021-21901 CVE-2021-21903 CVE-2021-21905+6 CVEs

Vulnerability Spotlight: Vulnerabilities in DaVinci Resolve video editing software could lead to code execution

Cisco TalosDec 20, 14:00 UTC · Dec 20, 2021Vulnerability in the wildCVE-2021-40417 CVE-2021-40418

UK Government Urges Organizations to Get Cyber Essentials Certified

Infosecurity MagazineOct 24, 09:00 UTC · Oct 24, 2024Vulnerability

Cybersecurity jobs available right now: December 9, 2025

Help Net SecurityMar 5, 08:44 UTC · Mar 5, 2026Vulnerability

Threat Advisory: High Severity OpenSSL Vulnerabilities

Cisco TalosNov 1, 19:03 UTC · Nov 1, 2022Vulnerability in the wildCVE-2022-3602 CVE-2022-3786

Operation “Armor Piercer:” Targeted attacks in the Indian subcontinent using commercial RATs

Cisco TalosSep 23, 12:01 UTC · Sep 23, 2021Vulnerability

ASUS Control Center Critical Flaw Allows Unauthenticated Attackers to Gain Root Access

ASUS patched CVE-2026-19397 (CVSS 7.7) in Control Center Express Agent, letting unauthenticated nearby attackers with an active session take over the host.

ASUS released version 1.7.24 of Control Center Express Agent to fix CVE-2026-19397, a CWE-306 missing-authentication flaw scored 7.7 on CVSS v4. Exploitation requires an active login session on the target and nearby network access, and agent compromise could lead to complete device takeover where the agent runs with elevated privileges. ASUS also issued a same-day advisory for Armory Crate covering ten additional CVEs.

GBHackersSep 8, 10:37 UTC · 8d agoVulnerability CVE-2026-19397 CVE-2026-12962 CVE-2026-18023+8 CVEs

NCSC Warns of Critical Check Point VPN Flaws as Large-Scale Exploitation Is Expected

Dutch NCSC warns of two critical CVSS 9.8 Check Point VPN flaws enabling unauthenticated remote code execution, urging immediate patching before mass exploitation.

The Dutch NCSC warned that CVE-2026-85102 and CVE-2026-85103, both rated 9.8 CVSS, allow unauthenticated remote attackers to execute arbitrary code on Check Point Quantum Security Gateway, Spark Firewall, and Security Management Server deployments when VPN is enabled. CVE-2026-85102 stems from improper certificate trust validation during VPN negotiation, while CVE-2026-85103 is a heap-based buffer overflow in ASN.1 certificate decoding. Check Point shipped emergency updates on September 9, 2026, including R82.10 Take 44, R82 Take 126, and R81.20 Take 166 or later, plus LivePatch for eligible systems. No public exploit code exists yet, but the NCSC rates exploitation likelihood high and recommends restricting UDP ports 500 and 4500 to known peers as a stopgap.

Cyber Security Newsupdated Sep 16, 17:14 UTC · 11h agofirst Sep 14, 05:11 UTC · 2d agoVulnerability 9 sources CVE-2026-85102 CVE-2026-85103