Product by Cisco
Cisco Secure Firewall Management Center (fmc)
29 known vulnerabilities in Cisco Secure Firewall Management Center (fmc) (Cisco), 3 of them actively exploited (CISA KEV).
Key figures
29
Vulnerabilities
3
Actively exploited (KEV)
2
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-20131 | Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 1 other product | 10.0 | |
| Critical | CVE-2026-20316 | Cisco Secure Firewall Management Center Software Static Credential Vulnerability In CISA KEVRansomwarealso in 1 other product | 5.3 | |
| Critical | CVE-2026-20079 | Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability In CISA KEValso in 1 other product | 10.0 | |
| Critical | CVE-2026-20242 | Cisco Secure Firewall Management Center (FMC): Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2026-20324 | Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability | 9.9 | |
| High | CVE-2026-20340 | Cisco Secure Firewall Management Center (FMC): Deserialization of Untrusted Data | 8.8 | |
| Critical | CVE-2026-20341 | Cisco Secure Firewall Management Center (FMC): Deserialization of Untrusted Data | 9.1 | |
| Critical | CVE-2026-20329 | Cisco Secure Firewall Management Center (FMC): Improper Check or Handling of Exceptional Conditions | 9.9 | |
| Critical | CVE-2026-20330 | Cisco Secure Firewall Management Center (FMC): Improper Neutralization | 9.9 | |
| High | CVE-2026-20295 | Cisco Secure Firewall Management Center (FMC): Memory Allocation with Excessive Size Value | 8.6 | |
| Critical | CVE-2026-20332 | Cisco Secure Firewall Management Center (FMC): Improper Access Control | 9.9 | |
| High | CVE-2026-20343 | Cisco Secure Firewall Management Center (FMC): Missing Authentication for Critical Function | 7.5 | |
| High | CVE-2026-20344 | Cisco Secure Firewall Management Center Software SQL Injection Vulnerability | 8.8 | |
| High | CVE-2026-20333 | Cisco Secure Firewall Management Center (FMC): Incorrect Comparison | 8.8 | |
| High | CVE-2026-20342 | Cisco Secure Firewall Management Center (FMC): Authorization Bypass Through User-Controlled Key | 7.7 | |
| High | CVE-2026-76412 | Cisco Secure Firewall Management Center (FMC): Permissions, Privileges, and Access Controls | 8.5 | |
| High | CVE-2026-76413 | Cisco Secure Firewall Management Center (FMC): Improper Restriction of Security Token Assignment | 8.2 | |
| Critical | CVE-2026-76420 | Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerability | 9.0 | |
| High | CVE-2026-20334 | Cisco Secure Firewall Management Center (FMC): Improper Adherence to Coding Standards | 8.4 | |
| Critical | CVE-2026-20331 | Cisco Secure Firewall Management Center (FMC): Protection Mechanism Failure | 9.6 | |
| High | CVE-2026-20335 | Cisco Secure Firewall Management Center (FMC): Incorrect Calculation | 8.1 | |
| High | CVE-2026-20336 | Cisco Secure Firewall Management Center (FMC): Improper Control of a Resource Through its Lifetime | 8.8 | |
| High | CVE-2026-20323 | Cisco Secure Firewall Management Center (FMC): Improper Certificate Validation | 8.3 | |
| High | CVE-2026-20002 | Cisco Secure Firewall Management Center (FMC): SQL Injection | 8.1 | |
| Medium | CVE-2026-20018 | Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability | 5.9 |
News
- Cisco patches max-severity ISE flaw, the second critical zero-day this weekcsoonline,
- NCSC-2026-0076 [1.03] [H/H] Kwetsbaarheden verholpen in Cisco Secure Firewall Management Centerncsc-nl,
- NCSC-2026-0271 [1.01] [M/H] Kwetsbaarheid verholpen in Cisco Secure Firewall Management Centerncsc-nl,
- NCSC-2026-0076 [1.02] [H/H] Kwetsbaarheden verholpen in Cisco Secure Firewall Management Centerncsc-nl,
- Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomwarethehackernews,
- CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadlinethehackernews,