Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
CISA lists this Cisco Secure Firewall Management Center (FMC) vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.
- Product
- Secure Firewall Management Center (FMC)
- Added to KEV
- 19 Mar 2026
- Federal remediation due
- 22 Mar 2026
- Known ransomware use
- Yes
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.