Cisco Secure Firewall Management Center FMC vulnerabilities

22 CVEs affecting Cisco Secure Firewall Management Center FMC, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76413, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-20340, published 2026-09-16. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is due to unsecured…
CVE-2026-20242, published 2026-09-16. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary commands…
CVE-2026-20342, published 2026-09-16. High severity, CVSS 7.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability…
CVE-2026-20295, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available…
CVE-2026-76413, published 2026-09-16. High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM…
CVE-2026-20324, published 2026-09-16. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary…
CVE-2026-20343, published 2026-09-16. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists…
CVE-2026-20329, published 2026-09-16. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20341, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is…
CVE-2026-76412, published 2026-09-16. High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability…

Latest

CVE-2026-20344, published 2026-09-16. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affected device. To…
CVE-2026-20336, published 2026-09-16. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20335, published 2026-09-16. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20334, published 2026-09-16. High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20333, published 2026-09-16. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…