CASCACascade Atlas

Evidence dossier

CVE-2026-20131

Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

Exploited in the wild (CISA KEV since Mar 19, 2026). cisco reports CVSS 3.1 10.0. EPSS estimates 31.2% exploit likelihood as of Aug 26, 2026.

78.8–80.4Priority evidence range
Evidence current through Aug 27, 2026, 6:09 PM UTC

As of Aug 27, 2026

Normalized restatement

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.

State
PUBLISHED
Published
Mar 4, 2026
Updated
Mar 25, 2026
Evidence coverage
99%

Evidence chronology

What was known when

Download this view's receipt →
  1. Source dateSource date omittedFirst observed by CASCA
    CISA-ADP

    Record text: CISA ADP Vulnrichment

    Inspect raw assertion
    Field
    container
    Value
    CISA ADP Vulnrichment
    Original evidence ↗
  2. Source dateSource date omittedFirst observed by CASCA
    cisco

    Record text: Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

    Inspect raw assertion
    Field
    container
    Value
    Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
    Original evidence ↗
  3. Source dateFirst observed by CASCA
    CISA KEV

    Exploitation cataloged: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

    Inspect raw assertion
    Field
    observed_exploitation
    Value
    Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
    Original evidence ↗
  4. Source dateFirst observed by CASCA
    FIRST EPSS

    EPSS score: 31.23% probability · 98.14th percentile

    Inspect raw assertion
    Field
    model_probability
    Value
    Probability 0.312310000000; percentile 0.981370000000
    Original evidence ↗
ExploitationCatalog member

CISA KEV · catalog date Mar 19, 2026 · first observed Jul 19, 2026

Exploit likelihood31.23%

FIRST EPSS · score date Aug 26, 2026 · 98.1th percentile · first observed Aug 26, 2026

SeverityCVSS 10.0

cisco · CVSS 3.1 · first observed Jul 19, 2026 · same-version scores align in this snapshot

Evidence detail

Source limits and decisions

Why each evidence state has this value

Outside this view’s verified evidence

Reason detail begins outside this selected snapshot; the state remains source-bound.

Source comparison

Who said what

CISA-ADPIndependent enrichment
Record text

CISA ADP Vulnrichment

Inspect raw assertion
Field
container
Value
CISA ADP Vulnrichment
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
ciscoOriginal assertion
Record text

Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

Inspect raw assertion
Field
container
Value
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CISA KEVOriginal assertion
Exploitation cataloged

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Inspect raw assertion
Field
observed_exploitation
Value
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Source dateFirst observed by CASCAOriginal evidence ↗
FIRST EPSSOriginal assertion
EPSS score

31.23% probability · 98.14th percentile

Inspect raw assertion
Field
model_probability
Value
Probability 0.312310000000; percentile 0.981370000000
Source dateFirst observed by CASCAOriginal evidence ↗

Applicability

Cited product scope

Trace impact →
71Underlying assertions
1Canonical products
71Target assertions
0Constraint assertions

Grouped from 1 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.

Identity source boundaries
  • Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
  • Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

2 scope groups

cisco · source assertedCiscoCisco Secure Firewall Management Center (FMC)Direct source scope
Affected: 7.0.0Affected: 7.0.0.1Affected: 7.0.1Affected: 7.1.0Affected: 6.4.0.13Affected: 7.0.1.1Affected: 6.4.0.14Affected: 7.1.0.1Affected: 7.0.2Affected: 6.4.0.15Affected: 7.2.0Affected: 7.0.2.1Affected: 7.0.3Affected: 7.1.0.2Affected: 7.2.0.1Affected: 7.0.4Affected: 7.2.1Affected: 7.0.5Affected: 6.4.0.16Affected: 7.3.0Affected: 7.2.2Affected: 7.3.1Affected: 7.2.3Affected: 7.1.0.3Affected: 7.2.3.1Affected: 7.2.4Affected: 7.0.6Affected: 7.2.4.1Affected: 7.2.5Affected: 7.3.1.1Affected: 7.4.0Affected: 6.4.0.17Affected: 7.0.6.1Affected: 7.2.5.1Affected: 7.4.1Affected: 7.2.6Affected: 7.4.1.1Affected: 7.0.6.2Affected: 6.4.0.18Affected: 7.2.7Affected: 7.2.5.2Affected: 7.3.1.2Affected: 7.2.8Affected: 7.6.0Affected: 7.4.2Affected: 7.2.8.1Affected: 7.0.6.3Affected: 7.4.2.1Affected: 7.2.9Affected: 7.0.7Affected: 7.7.0Affected: 7.4.2.2Affected: 7.2.10Affected: 7.6.1Affected: 7.4.2.3Affected: 7.0.8Affected: 7.6.2Affected: 7.7.10Affected: 7.2.10.1Affected: 7.0.8.1Affected: 7.6.2.1Affected: 7.2.10.2Affected: 7.7.10.1Affected: 7.4.2.4Affected: 7.4.3Affected: 7.7.11Affected: 7.6.4Affected: 10.0.0Affected: 7.4.4Affected: 7.4.5
Source-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Inspect raw assertion[{"status": "affected", "version": "7.0.0"}, {"status": "affected", "version": "7.0.0.1"}, {"status": "affected", "version": "7.0.1"}, {"status": "affected", "version": "7.1.0"}, {"status": "affected", "version": "6.4.0.13"}, {"status": "affected", "version": "7.0.1.1"}, {"status": "affected", "version": "6.4.0.14"}, {"status": "affected", "version": "7.1.0.1"}, {"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "6.4.0.15"}, {"status": "affected", "version": "7.2.0"}, {"status": "affected", "version": "7.0.2.1"}, {"status": "affected", "version": "7.0.3"}, {"status": "affected", "version": "7.1.0.2"}, {"status": "affected", "version": "7.2.0.1"}, {"status": "affected", "version": "7.0.4"}, {"status": "affected", "version": "7.2.1"}, {"status": "affected", "version": "7.0.5"}, {"status": "affected", "version": "6.4.0.16"}, {"status": "affected", "version": "7.3.0"}, {"status": "affected", "version": "7.2.2"}, {"status": "affected", "version": "7.3.1"}, {"status": "affected", "version": "7.2.3"}, {"status": "affected", "version": "7.1.0.3"}, {"status": "affected", "version": "7.2.3.1"}, {"status": "affected", "version": "7.2.4"}, {"status": "affected", "version": "7.0.6"}, {"status": "affected", "version": "7.2.4.1"}, {"status": "affected", "version": "7.2.5"}, {"status": "affected", "version": "7.3.1.1"}, {"status": "affected", "version": "7.4.0"}, {"status": "affected", "version": "6.4.0.17"}, {"status": "affected", "version": "7.0.6.1"}, {"status": "affected", "version": "7.2.5.1"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.2.6"}, {"status": "affected", "version": "7.4.1.1"}, {"status": "affected", "version": "7.0.6.2"}, {"status": "affected", "version": "6.4.0.18"}, {"status": "affected", "version": "7.2.7"}, {"status": "affected", "version": "7.2.5.2"}, {"status": "affected", "version": "7.3.1.2"}, {"status": "affected", "version": "7.2.8"}, {"status": "affected", "version": "7.6.0"}, {"status": "affected", "version": "7.4.2"}, {"status": "affected", "version": "7.2.8.1"}, {"status": "affected", "version": "7.0.6.3"}, {"status": "affected", "version": "7.4.2.1"}, {"status": "affected", "version": "7.2.9"}, {"status": "affected", "version": "7.0.7"}, {"status": "affected", "version": "7.7.0"}, {"status": "affected", "version": "7.4.2.2"}, {"status": "affected", "version": "7.2.10"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.4.2.3"}, {"status": "affected", "version": "7.0.8"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.7.10"}, {"status": "affected", "version": "7.2.10.1"}, {"status": "affected", "version": "7.0.8.1"}, {"status": "affected", "version": "7.6.2.1"}, {"status": "affected", "version": "7.2.10.2"}, {"status": "affected", "version": "7.7.10.1"}, {"status": "affected", "version": "7.4.2.4"}, {"status": "affected", "version": "7.4.3"}, {"status": "affected", "version": "7.7.11"}, {"status": "affected", "version": "7.6.4"}, {"status": "affected", "version": "10.0.0"}, {"status": "affected", "version": "7.4.4"}, {"status": "affected", "version": "7.4.5"}]
NVD CPE · APPLICATIONciscosecure_firewall_management_centerVulnerable target · 71 assertions
Version 10.0.0; Version 6.4.0.13; Version 6.4.0.14; Version 6.4.0.15; Version 6.4.0.16; Version 6.4.0.17; Version 6.4.0.18; Version 7.0.0; Version 7.0.0.1; Version 7.0.1; Version 7.0.1.1; Version 7.0.2; Version 7.0.2.1; Version 7.0.3; Version 7.0.4; Version 7.0.5; Version 7.0.6; Version 7.0.6.1; Version 7.0.6.2; Version 7.0.6.3; Version 7.0.7; Version 7.0.8; Version 7.0.8.1; Version 7.1.0; Version 7.1.0.1; Version 7.1.0.2; Version 7.1.0.3; Version 7.2.0; Version 7.2.0.1; Version 7.2.1; Version 7.2.10; Version 7.2.10.1; Version 7.2.10.2; Version 7.2.2; Version 7.2.3; Version 7.2.3.1; Version 7.2.4; Version 7.2.4.1; Version 7.2.5; Version 7.2.5.1; Version 7.2.5.2; Version 7.2.6; Version 7.2.7; Version 7.2.8; Version 7.2.8.1; Version 7.2.9; Version 7.3.0; Version 7.3.1; Version 7.3.1.1; Version 7.3.1.2; Version 7.4.0; Version 7.4.1; Version 7.4.1.1; Version 7.4.2; Version 7.4.2.1; Version 7.4.2.2; Version 7.4.2.3; Version 7.4.2.4; Version 7.4.3; Version 7.4.4; Version 7.4.5; Version 7.6.0; Version 7.6.1; Version 7.6.2; Version 7.6.2.1; Version 7.6.3; Version 7.6.4; Version 7.7.0; Version 7.7.10; Version 7.7.10.1; Version 7.7.11Canonical identity product-d70a67d88de10c38c299052d2aca7bcbf888acb598c38c7dfeb8877444f9704aLinked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.8:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 20
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    708a721e-11d2-4e9b-9f11-5b82f3fa742c
  2. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.8.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 21
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    943bda7b-0e37-4914-b7b2-edfd58faf653
  3. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 16
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8f81f708-aced-4e42-8ca9-116b5c4f5141
  4. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 9
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    73b92119-793d-4a43-a056-24db6826e759
  5. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 10
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    093a0bc2-037c-463f-afc5-ef11c2954ead
  6. cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 22
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a58a2da5-3ee7-408d-aafa-82330f0325b2
  7. cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 25
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5f1ffd07-b874-4d3c-8e2c-9a204f1e994e
  8. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 36
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    85e76ae7-12ac-4419-ae66-43730b173b4e
  9. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.4:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 58
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    366d966f-b60e-46b9-ad0c-d0c0692c984f
  10. cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 46
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c0ea3467-4205-4c41-af24-689330f7396b
  11. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 55
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    dde484eb-ffff-4dba-8c45-77635bebce32
  12. cpe:2.3:a:cisco:secure_firewall_management_center:7.7.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 66
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5bbdbce8-cd5e-48bd-b61b-a36376c5a585
  13. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 28
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2f0af047-eae9-4c77-bcef-5cb26f84c742
  14. cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 48
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    fef603ad-d69b-4dd8-a7f4-6befd355ef29
  15. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 30
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    bf84e043-df3c-4a95-8fda-b0fdcd795377
  16. cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.16:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9f007f6b-1eaa-468c-8159-78b020df1e58
  17. cpe:2.3:a:cisco:secure_firewall_management_center:7.6.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 62
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    de58474e-d8d8-468d-9866-8c67607181e0
  18. cpe:2.3:a:cisco:secure_firewall_management_center:10.0.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 70
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    05ae4609-a851-4b64-8506-117b0f92f7a9
  19. cpe:2.3:a:cisco:secure_firewall_management_center:7.7.10.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 68
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    34649064-8bce-4a61-ba3a-17cbc4690c7e
  20. cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.15:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    52c7994f-aa17-467b-919e-a49f0cc9db47
  21. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 26
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    fb5acb9e-86af-4ec1-9f36-a202429cd0f4
  22. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 51
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6a80bbbe-db5e-460a-8621-6e28d2bd6e44
  23. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 27
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ad1e4527-aae2-4da9-afda-6375839f7843
  24. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 39
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    953eb81a-1b53-4a57-9f59-d4a7d37e657e
  25. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 54
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a3ccc30d-fc39-4f59-b338-6753f6094387
  26. cpe:2.3:a:cisco:secure_firewall_management_center:7.6.2.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 63
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    29f91f5e-7049-400a-9c39-b20a639dd61d
  27. cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 45
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5d401072-6709-4921-8918-720f28d61e24
  28. cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.14:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    86ba5ba6-1f79-4c89-a3f4-a56e2b664aed
  29. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.6:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 37
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    4d803ec9-26ee-4799-a435-c782c92739cf
  30. cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.17:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 4
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c9053fde-a6be-4535-ae36-a323f8b7aca4
  31. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 32
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    36c229ab-2851-48d4-815a-63aab4462a24
  32. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 40
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1cb534bc-3e4d-4484-afd0-69524b1f07f9
  33. cpe:2.3:a:cisco:secure_firewall_management_center:7.6.4:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 65
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    388e9714-fcb6-41dd-a5c4-19e73af2fbcc
  34. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 13
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b881b8df-a96d-4b64-b98a-71f0d3388641
  35. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.7:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 19
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    44d21149-bf7b-4188-a336-49aa5683bdc1
  36. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.10:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 42
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b291af23-55ff-4f9a-87ac-76aa3bb3562f
  37. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 57
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    30f378a2-e599-44e7-b81f-845d84e0fde8
  38. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 52
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2b33f953-fef3-4c46-a12a-2a42d8339d6e
  39. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 53
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b2c8df03-2280-48b8-ac1e-4aaa31a36bdc
  40. cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.13:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e0780ad6-4f38-4400-aa63-e41879f74b68
  41. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 14
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f6a97625-d39c-42d5-89e4-415a868a0972
  42. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 6
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    dfa94312-376e-4785-888f-3c07612e1df7
  43. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 15
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5e4d83b4-9697-4071-ac9f-7adc86a6b529
  44. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 11
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c4f434fc-caa4-4dbb-8094-c4ecc28b31e7
  45. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 7
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    29e73fbf-2579-4660-affa-7f9607004226
  46. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 18
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b98bfdb6-0884-4a5b-b2f6-102ae22665c9
  47. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.5:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 59
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3a3e6840-7b1e-45f8-9527-3db66a9267ef
  48. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.7:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 38
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6eef87cd-2335-4886-a65c-4e33775aec52
  49. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2.4:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 56
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c663edb2-e632-4915-bf37-eee22ff26ed4
  50. cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 23
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7fa98eec-2059-4ca9-92f1-72c1e0bb7ec6
  51. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 33
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6da4bcfc-8237-4f5c-9863-523ee7d8619b
  52. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 29
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2ed03874-4071-4382-8a46-8b3a59e601ff
  53. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.10.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 44
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0b72005b-fbf0-4b0d-975b-178b511598b1
  54. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 34
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    07693a92-7d84-45a1-acd6-d83ae41d504b
  55. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.10.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 43
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    4170b357-c086-483a-bc6c-cb1391fa5831
  56. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 35
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2c78050a-a5fb-427b-bf0d-0353b240a4ff
  57. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 17
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    3c86116b-8475-40a0-a507-d4a7947f5f2c
  58. cpe:2.3:a:cisco:secure_firewall_management_center:7.7.10:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 67
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d098596d-8156-4130-9180-a48d2ecb0910
  59. cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 24
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f4c51ee7-866b-410c-b75e-ef260d5062b0
  60. cpe:2.3:a:cisco:secure_firewall_management_center:7.6.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 60
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    fcbdbc61-b4b4-462f-b039-8f5c1b189ae2
  61. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.9:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 41
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d6514bf0-5a21-4c3a-9d9d-49677d7a2409
  62. cpe:2.3:a:cisco:secure_firewall_management_center:7.6.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 61
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    73cb0c9d-263a-439c-baf9-87d1efe50184
  63. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 50
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f8056e69-22fa-4935-a576-916805d90c62
  64. cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 47
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9be94e38-5f29-4ae1-8129-7f7582c2cc75
  65. cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.18:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 5
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6e255975-f952-43ab-a577-b8d331ddb3ab
  66. cpe:2.3:a:cisco:secure_firewall_management_center:7.4.0:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 49
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d6bd1665-7824-4d98-a930-432cbda4ead5
  67. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 12
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    68c70bb3-33b3-4e7e-99d5-ff76d4ed96ae
  68. cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 31
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b9498087-9642-4a86-b3ee-1513c55a86e2
  69. cpe:2.3:a:cisco:secure_firewall_management_center:7.7.11:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 69
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9ce3e9b1-4817-4734-9ee9-e16698d3f709
  70. cpe:2.3:a:cisco:secure_firewall_management_center:7.6.3:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 64
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d71c054a-63ff-4858-a044-03fa72da2c8d
  71. cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 8
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    87faaffb-0589-441b-8289-8b8a6e18f705

Affected-product evidence

Accepted scope and product mapping

0 canonical links · 0 source-reported links

Applicability remains source-scoped; safety and exposure remain unassessed.

Assessments

CVSS by origin

10.0
psirt@cisco.comCVSS 3.1 · role Secondary · priority eligiblevalid_matchCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
10.0
ciscoCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibilityCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Evidence boundaries

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
  • NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Affected-product evidence remains source-scoped; canonical linkage is required before applicability scoring.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
  • OSV aggregation and OSV-converted NVD material are not independent corroboration.
  • Red Hat facts are vendor assertions for the exact supplied products.
  • Nonmembership and not-yet-observed states are not proof of safety.