CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — Detection & Response Kit Detection, hunting, and remediation resources for CVE-2026-76461 , a critical SQL injection vulnerability in Cisco AsyncOS for Cisco Secure Email Gateway SEG. ⚠️ Disclaimer This repository contains defensive content only : Sigma rules, YARA rules, technica...

CVE-2023-20178

CVE-2023-20178 This is PoC for Arbitrary File Delete vulnerability in Cisco Secure Client tested on 5.0.01242 and Cisco AnyConnect tested on 4.10.06079. When a user connect to vpn, vpndownloader.exe process is started in background and it will create directory in c:\windows\temp with default...

CVE-2025-20393

CVE-2025-20393 📌 Overview CVE-2025-20393 is a critical Remote Command Execution RCE vulnerability affecting Cisco Secure Email Gateway SEG and Cisco Secure Email and Web Manager SEWM appliances running Cisco AsyncOS. The vulnerability exists due to improper input validation in the Spam Quarantine...

cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

cisco-CVE-2023-20075

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Local Privilege Escalation and Shell Escape CVE: CVE-2023-20075 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

PT-2026-121688

@MarkusEicher70 MacMarkus, as you are asking, here a stupid question 🫩 The list below looks complete, but something is missing! For sure! CVSS=9.2 October 21st 2026 1. PHP Engine vulerability – "PHP2Shell" CVE-2026-109618 and CVE-2026-109619 Patched Versions: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35...

CVE-2026-20079

🚨 CVE-2026-20079 "Critical Cisco FMC Zero-Day" Critical Authentication Bypass Leading to Root RCE in Cisco Secure Firewall Management Center 📋 Overview CVE-2026-20079 is a critical vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software. An unauthenticated remot...

CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-Post-Incident-Written-Report This post-incident report analyzes the exploitation of CVE-2026-20131, a critical zero-day unauthenticated Remote Code Execution RCE vulnerability in Cisco Secure Firewall Management Center FMC. The document covers the initial intrusion vector via Java...

CVE-2026-76462

A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

CVE-2026-76462 Cisco Secure Client Privilege Escalation Vulnerability

A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

EUVD-2026-107381

A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

CVE-2026-76462

A vulnerability exists in the interprocess communication (IPC) channel of the Secure Firewall Posture module within Cisco Secure Client . Due to insufficient validation of user-supplied input , an authenticated local attacker can send crafted IPC messages to a local socket to elevate privileges. ...

CVE-2026-20218 Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

A vulnerability in the Snort 3 Visual Basic for Applications VBA Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due...

CVE-2026-20218 Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

A vulnerability in the Snort 3 Visual Basic for Applications VBA Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due...

CVE-2026-20218

A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine exists across multiple Cisco products . The flaw stems from improper range checking during the decompression of user-controlled VBA data. An unauthenticated, remote attacker can exploit this by sending crafted...

CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java Deserialization Severity: Critical CVSS 3.1: 10.0 CWE: CWE-502 — Deserialization of Untrusted Data Affected: Cisco Secure Firewall Management Center FMC Software Advisory: cisco-sa-fmc-rce-NKhnULJh Bug ID: CSCwt14636 Overview A...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

Cisco Secure Email Gateway 16.0 AMP Arbitrary File Write

Cisco Secure Email Gateway versions 13.0 through 16.0 prior to Content Scanner Tools package 25.3.0.5525 contain a relative path traversal vulnerability in AMP File Reputation attachment handling that allows unauthenticated arbitrary file write...

Cisco Secure Email Gateway Advanced Malware Protection Privilege Escalation

The vulnerability of the Advanced Malware Protection module of the Cisco Secure Email Gateway protection tool is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain write access to arbitrary files and execute...

Cisco Secure Firewall ASA 9.16 FTD Check

Nuclei templates perform unauthenticated version-banner checks for potentially affected Cisco Secure Firewall ASA and FTD installations covered by the September 2026 hardening advisory...