← Back to CVE List
CVE-2026-20340NVD
Vulnerability Summary
A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level.
This vulnerability is due to unsecured deserialization of web-management user-controlled data. An attacker could exploit this vulnerability by authenticating to the device and sending a crafted HTTP payload. A successful exploit could allow the attacker to save the crafted payload and then execute it on the underlying operating system as root.
To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Security Analyst (read-only).
This vulnerability is due to unsecured deserialization of web-management user-controlled data. An attacker could exploit this vulnerability by authenticating to the device and sending a crafted HTTP payload. A successful exploit could allow the attacker to save the crafted payload and then execute it on the underlying operating system as root.
To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Security Analyst (read-only).
CVSS v3.1 Base Metrics — Score 8.8 (HIGH)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.0
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.0.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.1.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.2
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.0
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.2.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.3
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.0.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.4
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.5
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.3.0
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.2
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.3.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.3
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.3.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.4
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.6
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.4.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.5
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.3.1.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.0
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.6.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.5.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.6
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.1.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.6.2
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.7
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.5.2
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.3.1.2
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.8
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.6.0
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.2
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.8.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.6.3
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.2.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.9
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.7
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.7.0
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.2.2
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.10
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.6.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.2.3
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.8
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.6.2
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.7.10
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.10.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.8.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.6.2.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.10.2
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.7.10.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.2.4
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.3
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.6.3
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.7.11
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.6.4
- Cisco Cisco Secure Firewall Management Center (FMC) >= 10.0.0
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.4
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.5
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.0.9
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.2.11
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.7.12
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.6.5
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.6
- Cisco Cisco Secure Firewall Management Center (FMC) >= 10.0.1
- Cisco Cisco Secure Firewall Management Center (FMC) >= 7.4.7
Not provided by cveorg for this CVE.