Cisco FMC RCE (CVE-2026-20131)

~Zscaler~
Unauthenticated RCE vulnerability (CVSS 10) in Cisco Secure FMC actively exploited in the wild, granting root access.
-
IOCs: CVE-2026-20131
-
#CVE202620131 #Cisco #RCE #ThreatIntel

CISA orders feds to patch max-severity Cisco flaw by Sunday CISA has ordered federal agencies to patch CVE-2026-20131 in Cisco Secure Firewall Management Center (FMC) by Sunday, March 22, after Cisco released a security bulletin and warned that no workaround exists. Vendor and Amazon threat intelligence confirmed active exploitation since late January by the Interlock ransomware group, which abuses insecure Java deserialization to achieve unauthenticated remote code execution as root, prompting CISA to add the flaw to its KEV catalog. #CVE-2026-20131 #Interlock

CISA mandates federal agencies patch critical Cisco Secure Firewall flaw CVE-2026-20131 by March 22. Exploited by Interlock ransomware via insecure Java deserialization, allowing root remote code execution. #CVE202620131 #Interlock #USA

CISA Adds Cisco Flaw to KEV

~Cisa~
CISA added CVE-2026-20131, an actively exploited Cisco Secure FMC/SCC deserialization flaw, to the KEV catalog.
-
IOCs: CVE-2026-20131
-
#CVE202620131 #Cisco #ThreatIntel