Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management vulnerabilities: known CVEs & security history
Cisco · Actively exploited · 187 tracked CVEs · 3 actively exploited · updated September 2026 · what is a CVE? →
This is the full list of known vulnerabilities (CVEs) across all Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management release lines — 187 in total, with 3 actively exploited in the wild. A CVE here doesn't mean your version is affected — check Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management's current status and the safe version to run.
Known Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management CVEs
Actively-exploited and most-severe first. Showing the top 80 of 187. Open any CVE for full details.
| CVE | Severity | CVSS | EPSS | Year |
|---|---|---|---|---|
| CVE-2026-20131⚡ exploited | critical | 10 | 31% | 2026 |
| CVE-2026-20079⚡ exploited | critical | 10 | 75% | 2026 |
| CVE-2026-20316⚡ exploited | medium | 5.3 | 10% | 2026 |
| CVE-2025-20265 | critical | 10 | 15% | 2025 |
| CVE-2024-20424 | critical | 9.9 | 1% | 2024 |
| CVE-2023-20048 | critical | 9.9 | 16% | 2023 |
| CVE-2019-16028 | critical | 9.8 | 3% | 2020 |
| CVE-2020-3318 | critical | 9.8 | 1% | 2020 |
| CVE-2024-20360 | high | 8.8 | 1% | 2024 |
| CVE-2019-12689 | high | 8.8 | 3% | 2019 |
| CVE-2019-12688 | high | 8.8 | 3% | 2019 |
| CVE-2019-12687 | high | 8.8 | 3% | 2019 |
| CVE-2019-12686 | high | 8.8 | 3% | 2019 |
| CVE-2019-12685 | high | 8.8 | 3% | 2019 |
| CVE-2019-12684 | high | 8.8 | 3% | 2019 |
| CVE-2019-12683 | high | 8.8 | 3% | 2019 |
| CVE-2019-12682 | high | 8.8 | 3% | 2019 |
| CVE-2019-12681 | high | 8.8 | 3% | 2019 |
| CVE-2019-12680 | high | 8.8 | 3% | 2019 |
| CVE-2019-12679 | high | 8.8 | 3% | 2019 |
| CVE-2018-0365 | high | 8.8 | 1% | 2018 |
| CVE-2016-6433 | high | 8.8 | 76% | 2016 |
| CVE-2016-1458 | high | 8.8 | 2% | 2016 |
| CVE-2016-1457 | high | 8.8 | 4% | 2016 |
| CVE-2021-40116 | high | 8.6 | 1% | 2021 |
| CVE-2020-3499 | high | 8.6 | 2% | 2020 |
| CVE-2018-0383 | high | 8.6 | 3% | 2018 |
| CVE-2018-0233 | high | 8.6 | 2% | 2018 |
| CVE-2017-12245 | high | 8.6 | 2% | 2017 |
| CVE-2017-12244 | high | 8.6 | 2% | 2017 |
| CVE-2016-6368 | high | 8.6 | 3% | 2017 |
| CVE-2025-20148 | high | 8.5 | 0% | 2025 |
| CVE-2023-20063 | high | 8.2 | 0% | 2023 |
| CVE-2020-3514 | high | 8.2 | 0% | 2020 |
| CVE-2026-20002 | high | 8.1 | 0% | 2026 |
| CVE-2020-3550 | high | 8.1 | 2% | 2020 |
| CVE-2020-3549 | high | 8.1 | 1% | 2020 |
| CVE-2020-3410 | high | 8.1 | 1% | 2020 |
| CVE-2020-3302 | high | 8.1 | 2% | 2020 |
| CVE-2016-6434 | high | 7.8 | 1% | 2016 |
| CVE-2023-20155 | high | 7.5 | 1% | 2023 |
| CVE-2022-20918 | high | 7.5 | 1% | 2022 |
| CVE-2022-20854 | high | 7.5 | 1% | 2022 |
| CVE-2021-1223 | high | 7.5 | 2% | 2021 |
| CVE-2020-3312 | high | 7.5 | 1% | 2020 |
| CVE-2019-1696 | high | 7.5 | 2% | 2019 |
| CVE-2018-0385 | high | 7.5 | 2% | 2018 |
| CVE-2018-0370 | high | 7.5 | 2% | 2018 |
| CVE-2016-9193 | high | 7.5 | 2% | 2016 |
| CVE-2016-6439 | high | 7.5 | 2% | 2016 |
| CVE-2016-6419 | high | 7.5 | 1% | 2016 |
| CVE-2023-20220 | high | 7.2 | 1% | 2023 |
| CVE-2023-20219 | high | 7.2 | 1% | 2023 |
| CVE-2019-15992 | high | 7.2 | 4% | 2020 |
| CVE-2019-12690 | high | 7.2 | 4% | 2019 |
| CVE-2021-40114 | medium | 6.8 | 2% | 2021 |
| CVE-2018-15397 | medium | 6.8 | 1% | 2018 |
| CVE-2019-1699 | medium | 6.7 | 1% | 2019 |
| CVE-2025-20301 | medium | 6.5 | 0% | 2025 |
| CVE-2024-20482 | medium | 6.5 | 0% | 2024 |
| CVE-2024-20473 | medium | 6.5 | 0% | 2024 |
| CVE-2024-20472 | medium | 6.5 | 0% | 2024 |
| CVE-2024-20471 | medium | 6.5 | 0% | 2024 |
| CVE-2024-20379 | medium | 6.5 | 1% | 2024 |
| CVE-2024-20374 | medium | 6.5 | 1% | 2024 |
| CVE-2024-20340 | medium | 6.5 | 0% | 2024 |
| CVE-2023-20114 | medium | 6.5 | 1% | 2023 |
| CVE-2022-20744 | medium | 6.5 | 1% | 2022 |
| CVE-2022-20743 | medium | 6.5 | 4% | 2022 |
| CVE-2019-12700 | medium | 6.5 | 2% | 2019 |
| CVE-2018-0278 | medium | 6.5 | 2% | 2018 |
| CVE-2017-6673 | medium | 6.5 | 1% | 2017 |
| CVE-2016-6435 | medium | 6.5 | 37% | 2016 |
| CVE-2016-1413 | medium | 6.5 | 1% | 2016 |
| CVE-2022-20926 | medium | 6.3 | 1% | 2022 |
| CVE-2022-20925 | medium | 6.3 | 1% | 2022 |
| CVE-2025-20235 | medium | 6.1 | 0% | 2025 |
| CVE-2024-20372 | medium | 6.1 | 0% | 2024 |
| CVE-2024-20275 | medium | 6.1 | 1% | 2024 |
| CVE-2024-20273 | medium | 6.1 | 0% | 2024 |
107 older / lower-severity CVEs not shown — see Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management's full record.
Is my Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management version affected?
The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.
Check your Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management version → · Monitor Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management for new CVEs →
Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management vulnerabilities — frequently asked
How many known vulnerabilities does Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management have?
IsItPatched tracks 187 CVEs for Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management, 3 of which are actively exploited (CISA KEV). 7 are critical-severity and 47 high-severity. These span every release line — what matters is whether the version you run is affected.
Does Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management have any actively-exploited vulnerabilities?
Yes — 3 Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management CVEs are in CISA's Known Exploited Vulnerabilities catalog, meaning they are confirmed exploited in the wild (1 linked to ransomware). Patch these as a priority.
What is the most severe Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management vulnerability?
Among tracked issues, CVE-2026-20131 (CRITICAL, CVSS 10), which is actively exploited, ranks highest — a Insecure deserialization weakness.
Is Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management safe to use?
It depends on the version. The latest supported Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management release clears the known issues; older versions may still be affected. Check the exact version you run for a verdict.
CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management security status · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management end-of-life · actively-exploited CVEs. Always verify against Cisco's advisories — see our disclaimer.