CVE-2026-76480
CriticalCVSS 9.8Summary
Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) contains vulnerabilities related to improper authentication, grouped under CWE-306. They were discovered during an internal security review and addressed in a hardening release.
Risk Assessment
The vulnerabilities may allow unauthorized access to the system, potentially leading to compromise of licensing data confidentiality and integrity.
Recommendation
Install the latest hardening release of Cisco License On-Prem to remediate these vulnerabilities.
Other vulnerabilities in Cisco License On-Prem
See all- CVE-2026-76484High
Vulnerability in Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) related to insufficient protection against code injection (CWE-94). Discovered during an internal security review, addressed in software hardening releases.
- CVE-2026-76452Medium
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. The vulnerability is due to insufficient validation of user-supplied input. Exploitation requires valid administrative user credentials.
- CVE-2026-76437Medium
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to improper validation of user-supplied content within configurations submitted to the web-based management interface. Exploitation requires valid administrative credentials.
- CVE-2026-76483Critical
A security review in Cisco License On-Prem (formerly SSM On-Prem) revealed multiple vulnerabilities related to insufficiently protected credentials (CWE-522). These have been addressed in hardening releases.
- CVE-2026-76482Critical
A security review in Cisco License On-Prem (formerly SSM On-Prem) revealed multiple vulnerabilities related to improper input verification (CWE-347). These have been addressed in hardening releases.
- CVE-2026-76454Critical
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem (formerly SSM On-Prem) could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition. It is due to improper input validation and lack of authentication in the management API.
- CVE-2026-20328Critical
A vulnerability in the web-based management interface of Cisco License On-Prem (formerly SSM On-Prem) could allow an unauthenticated, remote attacker to gain unauthorized access to the application. It is due to improper checks during the password reset process.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76480 are related to issues with improper authentication that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-306.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS