Cisco FMC CVE-2026-20324 is a critical sftunnel vulnerability with a CVSS score of 9.9. The flaw involves missing authorization (CWE-862) and can allow an attacker controlling or hijacking a registered sftunnel peer to write arbitrary files and execute commands as root on Secure Firewall Management Center. The important part: this isn't a typical unauthenticated internet-facing RCE. Exploitation requires valid peer context, but compromise of FMC could have significant downstream impact because it centrally manages Cisco Secure Firewall Threat Defense devices. Cisco reports no known exploitation and no workaround. Fixed releases should be applied as soon as possible. Technical breakdown + detection and remediation guidance: https://thecybersecguru.com/news/cishttps://thecybersecguru.com/news/cisco-fmc-cve-2026-20324-sftunnel-root-rce/co-fmc-cve-2026-20324-sftunnel-root-rce/