PT-2026-22976 · Cisco · Cisco Secure Firewall Management Center (Fmc)

Jason Crowder · Publicado 2026-03-04 · Atualizado 2026-03-04 · CVE-2026-20044

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Management Center (FMC) Software (affected versions not specified)

Description A flaw exists in the lockdown mechanism of the software that may allow a local attacker with valid administrative credentials to execute arbitrary commands as root. The issue stems from inadequate restrictions on remediation modules when the system is in lockdown mode. Exploitation involves sending crafted input to the system command-line interface (CLI). A successful exploit could enable an attacker to run arbitrary commands or code with root privileges, even while the system is in lockdown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2026-20044

Produtos afetados

Cisco Secure Firewall Management Center (Fmc)

Referências · 4

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf · Aviso do Fabricante
• https://t.me/CVEtracker/46328 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-20044 · Nota de Segurança
• https://twitter.com/CVEnew/status/2029272813585027295 · Publicação no Twitter