Threats tagged 'ghsa-xpr9-grjf-6fm6'

CVE-2026-20340 is a high-severity vulnerability in Cisco Secure FMC Software that allows an authenticated remote attacker with Security Analyst role or higher to execute arbitrary commands as root. The issue arises from unsecured deserialization of user-controlled data in the web management interface. Exploitation requires valid credentials and involves sending a crafted HTTP payload that can be saved and executed on the underlying OS with root privileges.