CVE-2025-20265

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device.  This vulnerability is due to a lack of proper handling of user input during the authentication phase. An attacker could exploit this vulnerability by sending crafted input when entering credentials that will be authenticated at the configured RADIUS server. A successful exploit could allow the attacker to execute commands at a high privilege level. Note: For this vulnerability to be exploited, Cisco Secure FMC Software must be configured for RADIUS authentication for the web-based management interface, SSH management, or both.

• CWE-74

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-radius-rce-TNBKf79Vendor Advisory
• https://www.bleepingcomputer.com/news/security/cisco-warns-of-max-severity-flaw-in-firewall-management-center/
• https://www.theregister.com/2025/08/15/cisco_secure_firewall_management_bug/

Published

Aug 14, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-2026The NPort 6100-G2/6200-G2 Series is affected by a high-sever…7.1
• CVE-2025-20260A vulnerability in the PDF scanning processes of ClamAV coul…9.8
• CVE-2025-20261A vulnerability in the SSH connection handling of Cisco Inte…8.8
• CVE-2025-20262A vulnerability in the Protocol Independent Multicast Versio…5
• CVE-2025-20263A vulnerability in the web services interface of Cisco Secur…8.6
• CVE-2025-20264A vulnerability in the web-based management interface of Cis…6.4
• CVE-2025-20267A vulnerability in the web-based management interface of Cis…4.8
• CVE-2025-20268A vulnerability in the Geolocation-Based Remote Access (RA) …5.8
• CVE-2025-20269A vulnerability in the web-based management interface of Cis…6.5
• CVE-2025-2027A double free vulnerability has been identified in the ASUS …5.9
• CVE-2025-20270A vulnerability in the web-based management interface of Cis…6.5
• CVE-2025-20271A vulnerability in the Cisco AnyConnect VPN server of Cisco …8.6