CISA Orders US Government to Patch Maximum Severity Cisco Flaw

**Executive summary:** CISA has ordered federal agencies to urgently patch CVE-2026-20131, a CVSS 10 remote code execution vulnerability in Cisco Secure Firewall Management Center that has been exploited in the wild by the Interlock ransomware group; attackers used it for initial access and deployed custom RATs, an in-memory HTTP-intercepting backdoor, legitimate remote access tools, and AD CS abuse for persistence and lateral movement.