Critical Alert 1 Active Exploit Detected Today

CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability →
Powered by CVE Watchtower
×
July 31, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-6542NVD

Vulnerability Summary

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
Severity Level
CRITICAL(9.3)
Published Date
Oct 21, 2025
Last Modified
Oct 21, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-78: OS Command Injection ↗
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone

External References