Product:
Cisco Secure Firewall Management Center
Summary
A vulnerability in the web interface of Cisco Secure Firewall Management Center Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 10 | CVE-2026-20079 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted HTTP requests to the web interface of the affected device. If successful, the attacker can execute various scripts and commands that grant root access to the device, allowing for full control over the system.
Affected Products
- Cisco Secure Firewall Management Center: Vulnerable due to improper system process handling at boot time.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Cisco. Additionally, restricting access to the web interface and monitoring for unusual activity can help reduce the risk of exploitation.