THREATOPS
THREAT OPS › Threat News › Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

medcisco_psirtPublished 2026-09-16

<p>A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary commands as&nbsp;<em>root </em>on an affected device.</p> <p>This vulnerability is due to insecure deserialization of a user-supplied Java byte stream from a host that is configured in the external database access

Indicators of compromise

Original source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-javarce-y2NypXwk?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Java%20Deserialization%20Remote%20Code%20Execution%20Vulnerability%26vs_k=1