cve2025-20265

cve2025-20265 Cisco FMC 인스턴스에서 잠재적으로 CVE-2025-20265에 취약할 수 있는지 탐지하는 안전한 Python 스크립트입니다. 공식 FMC API를 사용하여 버전을 확인하고, 단일/다중 대상 스캔을 지원하며, 무해한 로컬 PoC 마커를 포함합니다. Cisco FMC CVE-2025-20265 취약점 점검기 안전 기능: 공식 FMC REST API를 사용하여 버전 정보 조회 알려진 영향 버전과 비교 선택적 --poc 모드: 취약한 버전이 감지되면 무해한 로컬 proof-of-concept 마커 를...

FuegoTest

FuegoTest FuegoTest — это инструмент командной строки CLI, предназначенный для обнаружения устройств, потенциально уязвимых к CVE-2023-20048 в Cisco Firepower Management Center FMC. Используя библиотеку rich, FuegoTest обеспечивает улучшенный пользовательский опыт с индикаторами выполнения и...

CVE-2026-20079

🚨 CVE-2026-20079 "치명적인 Cisco FMC 제로데이" Cisco Secure Firewall Management Center에서 루트 RCE로 이어지는 치명적인 인증 우회 📋 개요 CVE-2026-20079 는 Cisco Secure Firewall Management CenterFMC 소프트웨어의 웹 인터페이스에서 발견된 치명적인 취약점입니다. 인증되지 않은 원격 공격자 가 인증을 우회하여 기본 운영 체제에서 루트 권한 으로 임의의 스크립트를 실행할 수 있습니다. CVE ID : CVE-2026-20079 C...

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the patches by September 12, 2026. The...

CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC リモートコード実行（Java デシリアライゼーション） 深刻度: Critical（CVSS 3.1: 10.0 ） CWE: CWE-502 — 信頼されないデータのデシリアライゼーション 影響を受ける製品: Cisco Secure Firewall Management Center FMC Software アドバイザリ: cisco-sa-fmc-rce-NKhnULJh バグ ID: CSCwt14636 概要 Cisco Secure Firewall Management Center FMC...

...[ More ]

This Metasploit module exploits CVE-2026-20079, an authentication bypass in the web interface of Cisco Secure Firewall Management Center FMC. It upgrades a boot-created machine session, obtains its session-specific action token, writes a Makeself-compatible shell script, and executes the selected...

day08-CISCO-fmc-sim

Day08 — Cisco FMCスタイルの管理RCE（シミュレーション） これは、管理プレーンのパースRCE（CVE-2025-20265に着想を得た）の影響クラスを示す、最小限の教育用シミュレーションです。ローカル学習のみを目的として、細工された入力からコマンドを意図的に実行します。 クイックスタート root@kitploit: chmod +x entrypoint.sh exploit.sh docker build -t fmc-sim . docker run --rm -d -p 8444:8444 --name fmc-sim fmc-sim...

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco's Secure Firewall Management Center FMC Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco's Secure FMC Software, which allows an unauthenticated, remote attack...

CVE-2026-20131

🚨 CVE-2026-20131 | Cisco FMC 치명적 RCE Cisco Secure Firewall Management Center에서의 인증되지 않은 원격 코드 실행 📌 개요 Cisco FMC 어플라이언스에서 원격 공격자가 루트 권한 코드 실행 을 달성할 수 있게 하는 치명적인 사전 인증 Java 역직렬화 취약점 입니다. 주요 정보 ✨ 안전한 취약점 검사기 CVE-2026-20131을 위한 아름답고 안전하며 신뢰할 수 있는 탐지 도구입니다. 📸 데모 기능 현대적인 색상 코드 기반 터미널 출력 스마트 FMC 핑거프린팅 오...

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco Secure Firewall Management Center FMC Software and Cisco Security Cloud Control SCC Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

Cisco-FMC-honeypot

FMC-트랩 저상호작용 허니팟 으로, Cisco Secure Firewall Management Center FMC 웹 표면을 모방하고 인증되지 않은 Java 직렬화 스타일 공격 트래픽CVE 스타일 안전하지 않은 역직렬화 프로브을 캡처합니다. 안전한 설계: 애플리케이션은 Java 객체를 역직렬화하지 않습니다. \xac\xed\x00\x05및 Base64 rO0AB…를 탐지하고 정규 표현식 및 휴리스틱을 사용하여 셸 또는 URL 문자열을 추출합니다. 명령 실행 없음: 2단계 URL은 Python requests를 사용하여 실행...

CVE-2026-20316

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

VulnCheck KEV: CVE-2026-20316

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

EUVD-2018-21871

WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMakerSQLMapping and generetecsvfmc AJAX actions. Attackers can inject malicious SQL code via the 'name' and 'searchlabels' parameter...

CVE-2018-25347

The vulnerability affects WordPress WordPress Contact Form Maker Plugin 1.12.20. It exposes SQL injection in the FormMakerSQLMapping and generete_csv_fmc AJAX actions, allowing an authenticated attacker to manipulate database queries via the name and search_labels parameters to potentially extrac...

Exploit for CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java...

CVE-2026-20002

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...

Exploit for CVE-2026-20079

CVE-2026...

EUVD-2026-9424

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...