Cisco released emergency updates for a CVSS 9.8 vulnerability in the Secure Firewall Management Center.
The bug allows unauthenticated remote code execution through crafted HTTP requests to the management interface.
Customers should patch immediately and restrict management access to trusted networks.