CVE-2026-20316 affects Cisco Secure Firewall Management Center (FMC), formerly known as Firepower Management Center. The vulnerability involves the use of a hard-coded password that could allow an unauthenticated, remote attacker to log in to affected devices using a low-privileged account. Successful exploitation could grant access to sensitive data within the impacted systems. The flaw does not require authentication, making it particularly dangerous for exposed deployments. CISA has flagged this vulnerability under BOD 26-04, which prioritizes security updates based on risk. Organizations using Cisco FMC are urged to apply patches immediately. The vulnerability is tracked in the NVD and covered by Cisco's own security advisory. Forensic triage requirements have also been outlined by CISA for affected organizations.