day08-CISCO-fmc-sim

Día08 — Simulación de RCE de Gestión estilo Cisco FMC Esta es una simulación educativa mínima que demuestra la clase de impacto de un RCE de análisis del plano de gestión inspirado en CVE-2025-20265. Ejecuta intencionalmente comandos a partir de una entrada manipulada solo para aprendizaje local...

cve2025-20265

cve2025-20265 Script Python seguro para detectar instancias Cisco FMC potencialmente vulnerables a CVE-2025-20265. Usa la API oficial de FMC para verificar la versión, admite escaneo de objetivo único/múltiple e incluye un marcador PoC local inofensivo. Cisco FMC CVE-2025-20265 Vulnerability...

CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java Deserialization Severity: Critical CVSS 3.1: 10.0 CWE: CWE-502 — Deserialization of Untrusted Data Affected: Cisco Secure Firewall Management Center FMC Software Advisory: cisco-sa-fmc-rce-NKhnULJh Bug ID: CSCwt14636 Overview A...

CVE-2026-20131

🚨 CVE-2026-20131 | RCE Crítico en Cisco FMC Ejecución Remota de Código no autenticada en Cisco Secure Firewall Management Center 📌 Resumen Una vulnerabilidad crítica de deserialización de Java previa a la autenticación que permite a atacantes remotos lograr ejecución de código a nivel de root en...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

Cisco-FMC-honeypot

FMC-Trap Un honeypot de baja interacción que simula la superficie web de un Cisco Secure Firewall Management Center FMC y captura tráfico de ataque de serialización Java sin autenticación sondas de deserialización insegura tipo CVE. Seguro por diseño: la aplicación no deserializa objetos Java;...

CVE-2026-20079-checker

CVE-2026-20079 Cisco FMC Read-Only Checker A small, deliberately limited validation utility for CVE-2026-20079 , the Cisco Secure Firewall Management Center FMC authentication-bypass vulnerability. This repository is a checker, not an exploit. It does not contain the session-upgrade, file-write,...

FuegoTest

FuegoTest FuegoTest es una herramienta de interfaz de línea de comandos CLI diseñada para detectar dispositivos potencialmente vulnerables a CVE-2023-20048 en Cisco Firepower Management Center FMC. Utilizando la librería Rich, FuegoTest ofrece una experiencia de usuario mejorada con barras de...

CVE-2026-20079

🚨 CVE-2026-20079 "Zero-Day crítico en Cisco FMC" Omisión crítica de autenticación que conduce a RCE root en Cisco Secure Firewall Management Center 📋 Resumen CVE-2026-20079 es una vulnerabilidad crítica en la interfaz web del software Cisco Secure Firewall Management Center FMC. Un atacante remot...

CVE-2026-76412

A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error when checking the privilege level of a user who is invoking remote diagnostics. An...

CVE-2026-20340

A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is due to unsecured deserialization of web-management user-controlled data. An attacker could exploit this vulnerability by...

CVE-2026-20344

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have a valid account on the device with the role of...

CVE-2026-20342

A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability exists because user input is not being sanitized. An attacker could exploit this vulnerability by...

CVE-2026-20343

A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeated...

CVE-2026-20341

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is due to unsecured deserialization of untrusted data over the sftunnel management connection. An attacker...

CVE-2026-20342

Cisco Secure Firewall Management Center (FMC) Software contains a low-privileged arbitrary file download vulnerability in a specific file download API. The root cause is unsanitized user input, allowing an authenticated, remote attacker to send a crafted HTTPS request and download arbitrary files...

EUVD-2026-81141

A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability exists because user input is not being sanitized. An attacker could exploit this vulnerability by...

CVE-2026-20342 Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download Vulnerability

A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability exists because user input is not being sanitized. An attacker could exploit this vulnerability by...

CVE-2026-20342 Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download Vulnerability

A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability exists because user input is not being sanitized. An attacker could exploit this vulnerability by...

EUVD-2026-81139

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the peer device and obtain access at the level of the manager role, which is equivalent to root. This...