# Cisco Secure Firewall Management Center vulnerabilities

Source: https://junglewise.ai/threats/technologies/secure-firewall-management-center  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/secure-firewall-management-center.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 16 vulnerabilities in Cisco Secure Firewall Management Center: 0 in the last 7 days and 10 in the last 90 days, 7 of them critical and 3 exploited in the wild. The most recent, CVE-2026-76413, was published on 16 September 2026. Nothing in the last four weeks, down from 9 vulnerabilities in the four before. 0 critical against 4.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 10
- All time: 16 (7 critical, 3 exploited in the wild)

## About Cisco Secure Firewall Management Center

Cisco centralized management platform for configuring and monitoring firewall policies across multiple Cisco security appliances.

## Latest Cisco Secure Firewall Management Center vulnerabilities

- [CVE-2026-76413: Cisco Secure FMC SSO token forgery in ASDM handler](https://junglewise.ai/threats/cve-2026-76413-cisco-secure-fmc-sso-token-forgery-in-asdm-handler) (high, CVSS 8.2, published 16 Sep 2026)
- [CVE-2026-76412: Cisco Secure FMC privilege escalation in remote diagnostics debugger](https://junglewise.ai/threats/cve-2026-76412-cisco-secure-fmc-privilege-escalation-in-remote-diagnostics) (high, CVSS 8.5, published 16 Sep 2026)
- [CVE-2026-20336: Cisco Secure Firewall software resource lifecycle vulnerability](https://junglewise.ai/threats/cve-2026-20336-cisco-secure-firewall-software-resource-lifecycle-vulnerability) (high, CVSS 8.8, published 16 Sep 2026)
- [CVE-2026-20323: Cisco Secure FMC and FTD sftunnel authentication bypass](https://junglewise.ai/threats/cve-2026-20323-cisco-secure-fmc-and-ftd-sftunnel-authentication-bypass) (high, CVSS 8.3, published 16 Sep 2026)
- [CVE-2026-20295: Cisco Secure FMC and FTD memory exhaustion in sftunnel](https://junglewise.ai/threats/cve-2026-20295-cisco-secure-fmc-and-ftd-memory-exhaustion-in-sftunnel) (high, CVSS 8.6, published 16 Sep 2026)
- [CVE-2026-20341: Cisco Secure FMC Software unsecured deserialization in sftunnel](https://junglewise.ai/threats/cve-2026-20341-cisco-secure-fmc-software-unsecured-deserialization-in-sftunnel) (critical, CVSS 9.1, published 16 Sep 2026)
- [CVE-2026-20324: Cisco Secure Firewall Management Center sftunnel arbitrary file write privilege escalation](https://junglewise.ai/threats/cve-2026-20324-cisco-secure-firewall-management-center-sftunnel-arbitrary-file) (critical, CVSS 9.9, published 16 Sep 2026)
- [CVE-2026-20242: Cisco Secure Firewall Management Center Java deserialization RCE](https://junglewise.ai/threats/cve-2026-20242-cisco-secure-firewall-management-center-java-deserialization-rce) (critical, CVSS 9.8, published 16 Sep 2026)
- [CVE-2026-76420: Cisco Secure FMC AJP connector peer impersonation](https://junglewise.ai/threats/cve-2026-76420-cisco-secure-fmc-ajp-connector-peer-impersonation) (critical, CVSS 9, published 16 Sep 2026)
- [CVE-2026-20293: Cisco UCS UEFI Shell Secure Boot bypass](https://junglewise.ai/threats/cve-2026-20293-cisco-ucs-uefi-shell-secure-boot-bypass) (high, CVSS 7.1, published 8 Sep 2026)
- [CVE-2026-20316: Cisco Secure Firewall Management Center static credentials in web interface](https://junglewise.ai/threats/cve-2026-20316-cisco-secure-firewall-management-center-static-credentials-in-web) (critical, exploited in the wild, CVSS 5.3, published 29 Jul 2026)
- [CVE-2026-20131: Cisco Secure Firewall Management Center deserialization RCE](https://junglewise.ai/threats/cve-2026-20131-cisco-secure-firewall-management-center-deserialization-rce) (critical, exploited in the wild, CVSS 10, published 19 Mar 2026)
- [CVE-2026-20079: Cisco Secure Firewall Management Center auth bypass in web interface](https://junglewise.ai/threats/cve-2026-20079-cisco-secure-firewall-management-center-auth-bypass-in-web) (critical, exploited in the wild, CVSS 10, published 4 Mar 2026)
- [CVE-2026-20057: Cisco Snort 3 VBA decompression denial of service](https://junglewise.ai/threats/cve-2026-20057-cisco-snort-3-vba-decompression-denial-of-service) (medium, CVSS 5.8, published 4 Mar 2026)
- [CVE-2026-20003: Cisco Secure FMC SQL injection in REST API](https://junglewise.ai/threats/cve-2026-20003-cisco-secure-fmc-sql-injection-in-rest-api) (medium, CVSS 4.9, published 4 Mar 2026)
- [CVE-2026-20002: Cisco Secure FMC SQL injection in web-based management interface](https://junglewise.ai/threats/cve-2026-20002-cisco-secure-fmc-sql-injection-in-web-based-management-interface) (high, CVSS 8.1, published 4 Mar 2026)

## Most severe Cisco Secure Firewall Management Center vulnerabilities

- [CVE-2026-20079: Cisco Secure Firewall Management Center auth bypass in web interface](https://junglewise.ai/threats/cve-2026-20079-cisco-secure-firewall-management-center-auth-bypass-in-web) (critical, exploited in the wild, CVSS 10, published 4 Mar 2026)
- [CVE-2026-20131: Cisco Secure Firewall Management Center deserialization RCE](https://junglewise.ai/threats/cve-2026-20131-cisco-secure-firewall-management-center-deserialization-rce) (critical, exploited in the wild, CVSS 10, published 19 Mar 2026)
- [CVE-2026-20316: Cisco Secure Firewall Management Center static credentials in web interface](https://junglewise.ai/threats/cve-2026-20316-cisco-secure-firewall-management-center-static-credentials-in-web) (critical, exploited in the wild, CVSS 5.3, published 29 Jul 2026)
- [CVE-2026-20324: Cisco Secure Firewall Management Center sftunnel arbitrary file write privilege escalation](https://junglewise.ai/threats/cve-2026-20324-cisco-secure-firewall-management-center-sftunnel-arbitrary-file) (critical, CVSS 9.9, published 16 Sep 2026)
- [CVE-2026-20242: Cisco Secure Firewall Management Center Java deserialization RCE](https://junglewise.ai/threats/cve-2026-20242-cisco-secure-firewall-management-center-java-deserialization-rce) (critical, CVSS 9.8, published 16 Sep 2026)
- [CVE-2026-20341: Cisco Secure FMC Software unsecured deserialization in sftunnel](https://junglewise.ai/threats/cve-2026-20341-cisco-secure-fmc-software-unsecured-deserialization-in-sftunnel) (critical, CVSS 9.1, published 16 Sep 2026)
- [CVE-2026-76420: Cisco Secure FMC AJP connector peer impersonation](https://junglewise.ai/threats/cve-2026-76420-cisco-secure-fmc-ajp-connector-peer-impersonation) (critical, CVSS 9, published 16 Sep 2026)
- [CVE-2026-20336: Cisco Secure Firewall software resource lifecycle vulnerability](https://junglewise.ai/threats/cve-2026-20336-cisco-secure-firewall-software-resource-lifecycle-vulnerability) (high, CVSS 8.8, published 16 Sep 2026)
- [CVE-2026-20295: Cisco Secure FMC and FTD memory exhaustion in sftunnel](https://junglewise.ai/threats/cve-2026-20295-cisco-secure-fmc-and-ftd-memory-exhaustion-in-sftunnel) (high, CVSS 8.6, published 16 Sep 2026)
- [CVE-2026-76412: Cisco Secure FMC privilege escalation in remote diagnostics debugger](https://junglewise.ai/threats/cve-2026-76412-cisco-secure-fmc-privilege-escalation-in-remote-diagnostics) (high, CVSS 8.5, published 16 Sep 2026)

## Vulnerabilities per week

Nothing in the last four weeks, down from 9 vulnerabilities in the four before. 0 critical against 4.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 1 | 0 | 0 |
| 14 Sep 2026 | 9 | 4 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Cisco technologies

- [Cisco IOS](https://junglewise.ai/threats/technologies/ios): 70 vulnerabilities
- [Cisco Identity Services Engine](https://junglewise.ai/threats/technologies/identity-services-engine): 58 vulnerabilities
- [Cisco IOS XE](https://junglewise.ai/threats/technologies/ios-xe): 57 vulnerabilities
- [Cisco Firepower Threat Defense](https://junglewise.ai/threats/technologies/firepower-threat-defense): 33 vulnerabilities
- [Cisco Firepower Threat Defense Software](https://junglewise.ai/threats/technologies/firepower-threat-defense-software): 33 vulnerabilities
- [Cisco IOS XR](https://junglewise.ai/threats/technologies/ios-xr): 31 vulnerabilities
- [Cisco IOS XE Software](https://junglewise.ai/threats/technologies/ios-xe-software): 28 vulnerabilities
- [Cisco Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-asa-software): 23 vulnerabilities
- [Cisco Snort 3](https://junglewise.ai/threats/technologies/snort-3): 20 vulnerabilities
- [Cisco Ios Software](https://junglewise.ai/threats/technologies/ios-software): 19 vulnerabilities
- [Cisco ISE Passive Identity Connector](https://junglewise.ai/threats/technologies/ise-passive-identity-connector): 19 vulnerabilities
- [Cisco Unity Connection](https://junglewise.ai/threats/technologies/unity-connection): 16 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Cisco Secure Firewall Management Center vulnerabilities", https://junglewise.ai/threats/technologies/secure-firewall-management-center, 11 November 2026.