CVE-2026-20344 is a SQL injection vulnerability in the web-based management interface of Cisco Secure FMC Software. It requires an authenticated attacker with specific administrative roles. Exploitation could lead to unauthorized data access, session credential theft, and administrative control over the device.