🚨 CVE-2026-20131 | Cisco FMC Critical RCE

Unauthenticated Remote Code Execution in Cisco Secure Firewall Management Center

📌 Overview

A critical pre-authentication Java deserialization vulnerability allowing remote attackers to achieve root-level code execution on Cisco FMC appliances.

Key Information

✨ Safe Vulnerability Checker

A beautiful, safe, and reliable detection tool for CVE-2026-20131.

📸 Demo

Features

Modern color-coded terminal output
Smart FMC fingerprinting (reduces false positives)
Automatic HTTP → HTTPS fallback
Version banner detection
Clean & professional design

Installation & Usage

git clone https://github.com/0xBlackash/CVE-2026-20131.git

cd CVE-2026-20131

pip install requests colorama

sudo python3 CVE-2026-20131.py https://target-fmc.example.com

🛡️ Mitigation & Patching

🚨 Immediate Action Required

Official Fix: Upgrade to the latest patched version of Cisco Secure Firewall Management Center.

Cisco Security Advisory →

📋 Affected Versions

Cisco FMC 6.4.x → 10.0.x (check advisory for exact builds)
Cisco Security Cloud Control (SCC) - Patched via maintenance

⚠️ Legal Disclaimer

This repository is for educational and authorized security testing purposes only.

Unauthorized scanning or exploitation of systems without explicit permission is illegal.

Made with ❤️ for the Cybersecurity Community

Star ⭐ if you find this helpful!

Severity	Critical
CVSS Score	10.0
Vulnerability Type	Java Deserialization
Exploited In Wild	Yes (Ransomware campaigns)
Patch Available	Yes

CVE-2026-20131

Most Popular