RaqibCTI
CVE

CVE-2026-20131

P1⬤ KNOWN RANSOMWARE USE
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Cisco · Secure Firewall Management Center (FMC)
Date added (CISA)
2026-03-19
Remediation due
2026-03-22
Known ransomware use
Yes
Remediation priority
P1known ransomware use · past CISA due date

Description

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.

Source: NVD ↗ · CISA KEV Catalog ↗