Cisco Secure Firewall Management Center RCE Vulnerability Disclosed
Article Content
- •Critical RCE vulnerability in Cisco FMC Software affecting external database access.
- •Attackers can execute arbitrary commands as root if they control a host in the access list.
- •Cisco has issued patches; no workarounds are available.
A critical vulnerability has been identified in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software, allowing unauthenticated remote attackers to execute arbitrary commands as root. This vulnerability arises from insecure deserialization of a user-supplied Java byte stream from hosts in the external database access list. Attackers can exploit this by sending a crafted Java byte stream to a specific TCP port of the affected device. Successful exploitation could lead to full system compromise. Cisco has released software updates to address this issue, but no workarounds are available. The attack surface is reduced if the FMC management interface is not publicly accessible. This advisory is part of a broader set of advisories released on September 16, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access… 
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…