CVE-2026-20242

Vendor

Cisco, Oracle

Product

java

CVSS

9.8

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   ZDI advisory ZDI 16 Sep 2026

   Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability

   This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Secure Firewall Management Center. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS…

   CVSS 8.1 CVE-2026-20242 Cisco
2. 36
   CVE NVD 16 Sep 2026

   A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated…

   A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device.…

   CVSS 9.8 CVE-2026-20242 Cisco Oracle
3. 32
   Cisco advisory Cisco PSIRT 16 Sep 2026

   Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

   A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This…

   CVE-2026-20242 Cisco