What’s Vulnerable › Vulnerabilities
CVE-2026-76454: Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-07 · updated 2026-10-08
- Weakness: CWE-23
Description
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.
Affected products
- Cisco License On-Prem: 7-202001, 1.1, 6.3.0, 8-202004, 8-202006, 1.2 (+30)
In the news
References
Get alerted when CVE-2026-76454 or the next vulnerability affects your stack