Lucene search
+L

22 matches found

Kitploit
Kitploit
added 2026/09/12 12:30 p.m.6 views

CVE-2026-20079

🚨 CVE-2026-20079「重大なCisco FMCゼロデイ」 Cisco Secure Firewall Management Centerにおける、root権限でのRCEに繋がる重大な認証バイパス 📋 概要 CVE-2026-20079 は、Cisco Secure Firewall Management Center FMC ソフトウェアのWebインターフェイスにおける重大な脆弱性です。 認証されていないリモート攻撃者 が認証をバイパスし、基盤となるオペレーティングシステム上で root権限 による任意のスクリプト実行が可能になります。 CVE ID :...

10CVSS8.5AI score0.75752EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/10 1:37 a.m.14 views

CVE-2026-20131

CVE-2026-20131 — Ejecución Remota de Código en Cisco Secure FMC Deserialización Java Gravedad: Crítica CVSS 3.1: 10.0 CWE: CWE-502 — Deserialización de Datos No Confiables Afectados: Software Cisco Secure Firewall Management Center FMC Aviso: cisco-sa-fmc-rce-NKhnULJh ID de Bug: CSCwt14636 Resume...

10CVSS8.4AI score0.33379EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2026/09/10 12:00 a.m.12 views

...[ More ]

This Metasploit module exploits CVE-2026-20079, an authentication bypass in the web interface of Cisco Secure Firewall Management Center FMC. It upgrades a boot-created machine session, obtains its session-specific action token, writes a Makeself-compatible shell script, and executes the selected...

10CVSS0.75752EPSS
SaveExploits6
Talos Blog
Talos Blog
added 2026/09/09 4:08 p.m.12 views

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco's Secure Firewall Management Center FMC Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco's Secure FMC Software, which allows an unauthenticated, remote attack...

10CVSS0.75752EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/08 2:44 a.m.8 views

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

10CVSS7.4AI score0.75752EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2026/03/11 1:30 a.m.466 views

Exploit for CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java...

10CVSS6.5AI score0.33379EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2026/03/05 7:30 p.m.10 views

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/04 6:31 p.m.14 views

EUVD-2026-9425

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/04 6:16 p.m.16 views

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS0.00348EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/04 6:16 p.m.20 views

CVE-2026-20003

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

4.9CVSS0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/04 5:18 p.m.48 views

CVE-2026-20003

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

4.9CVSS0.00281EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/04 5:18 p.m.42 views

CVE-2026-20003

Cisco Secure FMC Software’s REST API vulnerability enables authenticated remote SQL injection due to insufficient input validation. An attacker with valid credentials (Administrator, Security approver, Intrusion admin, Access admin, Network admin) could send crafted requests to read the database ...

4.9CVSS6AI score0.00281EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/04 5:18 p.m.19 views

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/04 5:18 p.m.26 views

CVE-2026-20002

Cisco Secure FMC Software’s web-based management interface is affected by an SQL injection due to inadequate input validation. An authenticated, remote attacker with valid credentials could craft requests to access the database and read certain OS files, with high impact to confidentiality and in...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/04 5:18 p.m.6 views

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/04 5:03 p.m.9 views

CVE-2026-20001

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

6.5CVSS6AI score0.00324EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/04 12:00 a.m.12 views

PT-2026-22966

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/04 12:00 a.m.39 views

PT-2026-22967

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

4.9CVSS6AI score0.00281EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/14 5:15 p.m.12 views

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

4.3CVSS5.8AI score0.00295EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/14 5:15 p.m.14 views

CVE-2025-20301

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to access troubleshoot files for a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

6.5CVSS5.8AI score0.00367EPSS
SaveExploits0References1
Rows per page
Query Builder