References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-attack-N9bf4 https://nvd.nist.gov/vuln/detail/CVE-2025-20393 https://www.hkcert.org/security-bulletin/cisco-asyncos-remote-code-execution-vulnerability_20251218 https://starlabs.sg/blog/2026/02-pickling-the-mailbox-a-deep-dive-into-cve-2025-20393/ https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-13668.html https://www.cisecurity.org/advisory/a-vulnerability-in-cisco-asyncos-could-allow-for-remote-code-execution_2025-117 https://www.esentire.com/security-advisories/cisco-zero-day-vulnerability-cve-2025-20393-exploited-in-the-wild https://thehackernews.com/2026/01/cisco-patches-zero-day-rce-exploited-by.html https://blog.talosintelligence.com/uat-9686/
Related VulnerabilitiesCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassCisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationCisco Any Router and Switch 默认口令漏洞Cisco IOS 缓冲区溢出漏洞PoCCVE-2024-20404: Cisco Finesse - Server-Side Request Forgery (SSRF)Cisco IOS XE Software 命令注入漏洞