Lucene search
+L

23 matches found

Kitploit
Kitploit
added 2026/09/12 12:30 p.m.6 views

CVE-2026-20079

🚨 CVE-2026-20079 "치명적인 Cisco FMC 제로데이" Cisco Secure Firewall Management Center에서 루트 RCE로 이어지는 치명적인 인증 우회 📋 개요 CVE-2026-20079 는 Cisco Secure Firewall Management CenterFMC 소프트웨어의 웹 인터페이스에서 발견된 치명적인 취약점입니다. 인증되지 않은 원격 공격자 가 인증을 우회하여 기본 운영 체제에서 루트 권한 으로 임의의 스크립트를 실행할 수 있습니다. CVE ID : CVE-2026-20079 C...

10CVSS8.5AI score0.75752EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/10 1:37 a.m.14 views

CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC リモートコード実行(Java デシリアライゼーション) 深刻度: Critical(CVSS 3.1: 10.0 ) CWE: CWE-502 — 信頼されないデータのデシリアライゼーション 影響を受ける製品: Cisco Secure Firewall Management Center FMC Software アドバイザリ: cisco-sa-fmc-rce-NKhnULJh バグ ID: CSCwt14636 概要 Cisco Secure Firewall Management Center FMC...

10CVSS8.4AI score0.33379EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2026/09/10 12:00 a.m.12 views

...[ More ]

This Metasploit module exploits CVE-2026-20079, an authentication bypass in the web interface of Cisco Secure Firewall Management Center FMC. It upgrades a boot-created machine session, obtains its session-specific action token, writes a Makeself-compatible shell script, and executes the selected...

10CVSS0.75752EPSS
SaveExploits6
Talos Blog
Talos Blog
added 2026/09/09 4:08 p.m.12 views

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco's Secure Firewall Management Center FMC Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco's Secure FMC Software, which allows an unauthenticated, remote attack...

10CVSS0.75752EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/08 2:44 a.m.8 views

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

10CVSS7.4AI score0.75752EPSS
SaveExploits6
GithubExploit
GithubExploit
added 2026/03/11 1:30 a.m.466 views

Exploit for CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java...

10CVSS6.5AI score0.33379EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2026/03/05 7:30 p.m.10 views

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/04 6:31 p.m.14 views

EUVD-2026-9425

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/04 6:16 p.m.16 views

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS0.00348EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/04 6:16 p.m.21 views

CVE-2026-20003

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

4.9CVSS0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/04 5:18 p.m.49 views

CVE-2026-20003

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

4.9CVSS0.00281EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/04 5:18 p.m.42 views

CVE-2026-20003

Cisco Secure FMC Software’s REST API vulnerability enables authenticated remote SQL injection due to insufficient input validation. An attacker with valid credentials (Administrator, Security approver, Intrusion admin, Access admin, Network admin) could send crafted requests to read the database ...

4.9CVSS6AI score0.00281EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/04 5:18 p.m.19 views

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/04 5:18 p.m.26 views

CVE-2026-20002

Cisco Secure FMC Software’s web-based management interface is affected by an SQL injection due to inadequate input validation. An authenticated, remote attacker with valid credentials could craft requests to access the database and read certain OS files, with high impact to confidentiality and in...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/04 5:18 p.m.6 views

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/04 5:03 p.m.9 views

CVE-2026-20001

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

6.5CVSS6AI score0.00324EPSS
SaveExploits0References2Affected Software1
Metasploit
Metasploit
added 2026/03/04 12:00 a.m.7 views

Cisco Secure Firewall Management Center Authentication Bypass RCE

This module exploits CVE-2026-20079, an authentication bypass in the web interface of Cisco Secure Firewall Management Center FMC. It upgrades a boot-created machine session, obtains its session-specific action token, writes a Makeself-compatible shell script, and executes the selected command...

10CVSS0.75752EPSS
SaveExploits6
Positive Technologies
Positive Technologies
added 2026/03/04 12:00 a.m.12 views

PT-2026-22966

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

8.1CVSS6AI score0.00348EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/04 12:00 a.m.39 views

PT-2026-22967

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

4.9CVSS6AI score0.00281EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/14 5:15 p.m.12 views

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

4.3CVSS5.8AI score0.00295EPSS
SaveExploits0References1
Rows per page
Query Builder