Threats tagged 'ghsa-m3pq-vq89-c8m5'

CVE-2026-20324 is a critical vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software. It allows an authenticated remote attacker with valid user credentials to execute arbitrary commands as root by exploiting improper file write permissions. The attacker can hijack or act as a registered sftunnel peer to write and execute malicious files with root privileges on the affected device.