Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution

Threat Score:
79
The Hacker News
3 hours ago

Overview

Cisco has released security updates to address a maximum-severity security flaw in Secure Firewall Management Center (FMC) Software that could allow an attacker to execute arbitrary code on affected systems. The vulnerability, assigned the CVE identifierCVE-2025-20265(CVSS score: 10.0), affects the RADIUS subsystem implementation that could permit an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. The networking equipment major said the issue ...

Related Articles

5 articles
2

‘Blue Locker’ Ransomware Targeting Oil & Gas Sector in Pakistan

Security Affairs • 2 hours ago

Blue Locker ransomware hits Pakistan’s oil & gas sector, severely impacting Pakistan Petroleum; NCERT warns ministries of severe ongoing risk. This week Pakistan’s National Cyber Emergency Response Team (NCERT – National CERT – Pakistan) has issued an advisory to 39 key ministries and institutions and warned them of a “severe risk” posed by the ongoing […]

Score
87
Read more
3

Palo Alto GlobalProtect Vulnerability Allows Privilege Escalation via Certificate Bypass

GB Hackers • 1 hour ago

Palo Alto GlobalProtect Vulnerability Allows Privilege Escalation via Certificate Bypass A newly disclosed vulnerability in Palo Alto Networks’ GlobalProtect application could allow attackers to escalate privileges and install malicious software on affected systems through improper certificate validation. The security flaw, tracked asCVE-2025-2183, was published on August 13, 2025, and affects multiple versions of the popular VPN client across Windows and Linux platforms. Critical Security Flaw

Score
85
Read more
5
Source Code of ERMAC V3.0 Malware Exposed by ‘changemeplease’ Password

Source Code of ERMAC V3.0 Malware Exposed by ‘changemeplease’ Password

GB Hackers • 2 hours ago

Source Code of ERMAC V3.0 Malware Exposed by ‘changemeplease’ Password A significant security breach has exposed the complete source code of ERMAC V3.0, a sophisticated banking trojan that targets over 700 financial applications worldwide. The leak,discoveredby cybersecurity firm Hunt.io in March 2024, was made possible by a surprisingly weak default password: “changemeplease.” The discovery occurred when Hunt.io researchers identified an open directory containing the complete ERMAC V3.0 source

Score
83
Read more