CVE-2026-20131

cisco secure firewall management center

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-20131

Katalog CVE

CVSS 10.0 · Critical KEV · sudah dieksploitasi Dipakai ransomware EPSS 43,2%

Kerentanan Deserialization of Untrusted Data pada cisco secure firewall management center. Skor CVSS 3.1 10.0 (Critical) menurut cisco.com. Masuk katalog KEV CISA pada 19 Maret 2026, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.

Rincian

Terbit di NVD
4 Maret 2026
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
10.0 (Critical), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-502: Deserialization of Untrusted Data
EPSS (30 hari)
43,2% peluang dieksploitasi; lebih tinggi dari 98,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Masuk KEV
19 Maret 2026
Tenggat CISA
22 Maret 2026 (untuk instansi federal AS)
Ransomware
Tercatat dipakai dalam kampanye ransomware
Tindakan wajib
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco secure firewall management center Versi 6.4.0.13
cisco secure firewall management center Versi 6.4.0.14
cisco secure firewall management center Versi 6.4.0.15
cisco secure firewall management center Versi 6.4.0.16
cisco secure firewall management center Versi 6.4.0.17
cisco secure firewall management center Versi 6.4.0.18
cisco secure firewall management center Versi 7.0.0
cisco secure firewall management center Versi 7.0.0.1
cisco secure firewall management center Versi 7.0.1
cisco secure firewall management center Versi 7.0.1.1
cisco secure firewall management center Versi 7.0.2
cisco secure firewall management center Versi 7.0.2.1
cisco secure firewall management center Versi 7.0.3
cisco secure firewall management center Versi 7.0.4
cisco secure firewall management center Versi 7.0.5
cisco secure firewall management center Versi 7.0.6
cisco secure firewall management center Versi 7.0.6.1
cisco secure firewall management center Versi 7.0.6.2
cisco secure firewall management center Versi 7.0.6.3
cisco secure firewall management center Versi 7.0.7
cisco secure firewall management center Versi 7.0.8
cisco secure firewall management center Versi 7.0.8.1
cisco secure firewall management center Versi 7.1.0
cisco secure firewall management center Versi 7.1.0.1
cisco secure firewall management center Versi 7.1.0.2
cisco secure firewall management center Versi 7.1.0.3
cisco secure firewall management center Versi 7.2.0
cisco secure firewall management center Versi 7.2.0.1
cisco secure firewall management center Versi 7.2.1
cisco secure firewall management center Versi 7.2.2
cisco secure firewall management center Versi 7.2.3
cisco secure firewall management center Versi 7.2.3.1
cisco secure firewall management center Versi 7.2.4
cisco secure firewall management center Versi 7.2.4.1
cisco secure firewall management center Versi 7.2.5
cisco secure firewall management center Versi 7.2.5.1
cisco secure firewall management center Versi 7.2.5.2
cisco secure firewall management center Versi 7.2.6
cisco secure firewall management center Versi 7.2.7
cisco secure firewall management center Versi 7.2.8
cisco secure firewall management center Versi 7.2.8.1
cisco secure firewall management center Versi 7.2.9
cisco secure firewall management center Versi 7.2.10
cisco secure firewall management center Versi 7.2.10.1
cisco secure firewall management center Versi 7.2.10.2
cisco secure firewall management center Versi 7.3.0
cisco secure firewall management center Versi 7.3.1
cisco secure firewall management center Versi 7.3.1.1
cisco secure firewall management center Versi 7.3.1.2
cisco secure firewall management center Versi 7.4.0
cisco secure firewall management center Versi 7.4.1
cisco secure firewall management center Versi 7.4.1.1
cisco secure firewall management center Versi 7.4.2
cisco secure firewall management center Versi 7.4.2.1
cisco secure firewall management center Versi 7.4.2.2
cisco secure firewall management center Versi 7.4.2.3
cisco secure firewall management center Versi 7.4.2.4
cisco secure firewall management center Versi 7.4.3
cisco secure firewall management center Versi 7.4.4
cisco secure firewall management center Versi 7.4.5

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 71 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.