Cisco Secure Firewall Management Vulnerability Enables Remote Code Execution

Cisco issued an urgent advisory for a critical CVSS 10.0 unauthenticated remote code execution vulnerability in Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) stemming from insecure Java object deserialization; successful exploitation yields root-level control of the management device, enabling policy manipulation and lateral pivoting. There are no workarounds — organizations must apply Cisco's official updates immediately; Cisco reports no observed active exploitation at publication.