What’s Vulnerable › Products

Cisco Firepower Management Center vulnerabilities

210 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 38 published in the last 12 months.

Check whether your Cisco Firepower Management Center version is affected

Exploited Cisco Firepower Management Center vulnerabilities

• CVE-2026-20079 — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
• CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Latest Cisco Firepower Management Center vulnerabilities

• CVE-2026-76413 — Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerability (CVSS 8.2)
• CVE-2026-76412 — Cisco Secure Firewall Management Center Software Authenticated Privilege Escalation to Root Vulnerability (CVSS 8.5)
• CVE-2026-20344 — Cisco Secure Firewall Management Center Software SQL Injection Vulnerability (CVSS 8.8)
• CVE-2026-20343 — Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-20342 — Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download Vulnerability (CVSS 7.7)
• CVE-2026-20340 — Cisco Secure Firewall Management Center Software Deserialization Arbitrary Root Command Execution Vulnerability (CVSS 8.8)
• CVE-2026-20336 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities (CVSS 8.8)
• CVE-2026-20335 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities (CVSS 8.1)
• CVE-2026-20334 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities (CVSS 8.4)
• CVE-2026-20333 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities (CVSS 8.8)
• CVE-2026-20332 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities (CVSS 9.9)
• CVE-2026-20323 — Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerability (CVSS 8.3)
• CVE-2026-20295 — Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20341 — Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerability (CVSS 9.1)
• CVE-2026-20330 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities (CVSS 9.9)
• CVE-2026-20329 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities (CVSS 9.9)
• CVE-2026-20324 — Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability (CVSS 9.9)
• CVE-2026-20242 — Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-76420 — Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerability (CVSS 9.0)
• CVE-2026-20331 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilities (CVSS 9.6)
• CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (CVSS 5.3) — exploited
• CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability (CVSS 10.0) — exploited
• CVE-2026-20079 — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVSS 10.0) — exploited
• CVE-2026-20044 — Cisco Secure Firewall Management Center Command Injection Vulnerability (CVSS 6.0)
• CVE-2026-20018 — Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability (CVSS 5.9)