TLDR Tech / News
Cisco Firewall software has two critical unauthenticated RCE flaws
Two severe vulnerabilities allowing unauthenticated remote code execution with CVSS scores of 10.0 were found in the Cisco Secure Firewall Management Center, granting attackers root privileges. One flaw, CVE-2026-20131, was actively exploited as a zero-day by the Interlock ransomware group for months before its public disclosure. As the management center oversees all connected firewalls, a breach compromises the entire security network. Cisco has issued updates to improve security and provided detection methods for both vulnerabilities.
Read the full story