Secure Firewall Management Center (FMC)
Cisco Secure Firewall Management Center (FMC) 7.6
Vulnerabilities, fixed releases, vendor recommendation and support status of the 7.6 branch, from official sources.
Sources last modified 16 Sept 2026 · Last verified by Patcharo: 1 Oct 2026 at 09:32 UTC
- 3
- Matched CVEs
- 3
- CISA KEV
- 7.6.6
- Newest fix stated
- No statement in the catalog
- Support
including 2 critical
In brief
- Recommended maintenance build
- No official recommendation
- Recommended release
- No official recommendation
- Releases listed by the vendor
- No release list read from the vendor
- CERT-FR
- 2 documents
Vulnerabilities affecting 7.6
Each record matched to this branch with the fixed release the source states, newest first.
- CVE-2026-20316KEVRansomware
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
Medium5.3CVSS 3.1, MediumFirst fixed release7.6.6Published - CVE-2026-20131KEVRansomware
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
Critical10CVSS 3.1, CriticalFirst fixed releaseNot published in the sources followedPublished - Critical10CVSS 3.1, CriticalFirst fixed release7.6.6Published
Vendor recommendation
The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.
Cisco publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.
Support status
From the vendor's published life-cycle policy; support is not a recommendation.
The life-cycle policy Patcharo reads states nothing about this branch.
CERT-FR advisories and alerts
Documents of the French national CERT referencing these CVEs, newest first.
- Advisory (AVI)CERTFR-2026-AVI-0950Vulnerability in Cisco Firewall Management CenterPublished 30 Jul 2026
- Advisory (AVI)CERTFR-2026-AVI-0242Multiple vulnerabilities in Cisco productsPublished 5 Mar 2026
Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.
How Patcharo reads this
Affected and fixed releases come from the vendor's structured statements, matched by exact version and patch level. The recommendation is the vendor's own statement; the support status comes from its life-cycle policy. Unknown never becomes Not affected.
Read the methodologyRead the guide: Cisco Secure Firewall release trains: Threat Defense, Management Center and ASA versions explained