fca vulnerability