Cisco Secure Firewall Management Center Software sftunnel Root Arbitrary Code Execution Vulnerability

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions to write an arbitrary file to any location on the device. An attacker could exploit this vulnerability by hijacking the sftunnel communication connection or being a valid registered sftunnel peer and…

Číst originál na Cisco PSIRT →

CZ · EN/orig

Cisco US

tg: zranitelnost

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-20324	9.9 3.1 · cisco	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.