Secure Firewall Management Center vulnerabilitiesAnd the versions its exploited flaws hit.
Secure Firewall Management Center is made by Cisco. We track 54 published vulnerabilities in it, across 220 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 29 July 2026. If you run Secure Firewall Management Center, check your version against the exploited flaws below and patch those first.
The most recent Secure Firewall Management Center flaw added to the known-exploited list is CVE-2026-20316, on 29 July 2026. We keep watching the known-exploited list.
Which versions of Secure Firewall Management Center do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
- CVE-2026-20316Exploited list, 29 Jul 2026
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
7.0.0 to 7.0.97.2.0 to 7.2.117.3.0 to 7.3.1.27.4.0 to 7.4.77.6.0 to 7.6.57.7.0 to 7.7.1210.0.0 to 10.0.1
Which Secure Firewall Management Center vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 5.3Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an...
Which Secure Firewall Management Center flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 81%CVE-2016-6433High
The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872.
- 37%CVE-2016-6435Medium
The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376.
- 35%
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access...
- 16%CVE-2025-20265Critical
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by...
- 3.7%CVE-2016-1457High
The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x...
- 3.0%CVE-2016-6368High
A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service...
- 2.4%CVE-2016-1458High
The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with...
- 2.2%CVE-2017-3809Medium
A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to prevent deployment of a complete and accurate rule base.
- 2.0%CVE-2016-9193High
A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware...
- 1.9%CVE-2017-3814Medium
A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content, aka a URL Bypass.
Running Secure Firewall Management Center? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.
- Matched to
- Secure Firewall Management Center on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 54 published vulnerabilities listed under the name Secure Firewall Management Center, across 220 versions. The most recent Secure Firewall Management Center flaw added to the known-exploited list is CVE-2026-20316, on 29 July 2026.
1 is on the list of flaws known to be exploited. The most recently added is CVE-2026-20316.
Each flaw names its own versions, usually as ranges. The newest, CVE-2026-20316, affects 7.0.0 to 7.0.9, 7.2.0 to 7.2.11, 7.3.0 to 7.3.1.2, 7.4.0 to 7.4.7 and more. The versions for every exploited flaw are listed on this page.
Create a EdgeProtect account and track Secure Firewall Management Center. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.