All vulnerabilities
CVE-2026-76454

Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

Cisco Cisco License On-PremNetwork & edge
Open in ThreatlineRecord JSON
CVSS
9.1Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.58%Chance of exploitation activity in the next 30 days, higher than 47% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published7 Oct 2026Updated 7 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application.

This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.

Text from CVE List

Affected versions 30

  • Cisco License On-Premaffected: 7-202001CVE List
  • Cisco License On-Premaffected: 1.1CVE List
  • Cisco License On-Premaffected: 6.3.0CVE List
  • Cisco License On-Premaffected: 8-202004CVE List
  • Cisco License On-Premaffected: 8-202006CVE List
  • Cisco License On-Premaffected: 1.2CVE List
  • Cisco License On-Premaffected: 1.3CVE List
  • Cisco License On-Premaffected: 8-202012CVE List
  • Cisco License On-Premaffected: 8-202010CVE List
  • Cisco License On-Premaffected: 8-202008CVE List
  • Cisco License On-Premaffected: 9-202201CVE List
  • Cisco License On-Premaffected: 8-202102CVE List
  • Cisco License On-Premaffected: 1.4CVE List
  • Cisco License On-Premaffected: 8-202105CVE List
  • Cisco License On-Premaffected: 8-202108CVE List
  • Cisco License On-Premaffected: 8-202112CVE List
  • Cisco License On-Premaffected: 8-202201CVE List
  • Cisco License On-Premaffected: 8-202206CVE List
  • Cisco License On-Premaffected: 8-202212CVE List
  • Cisco License On-Premaffected: 8-202302CVE List
  • Cisco License On-Premaffected: 8-202303CVE List
  • Cisco License On-Premaffected: 8-202304CVE List
  • Cisco License On-Premaffected: 8-202308CVE List
  • Cisco License On-Premaffected: 8-202401CVE List
  • Cisco License On-Premaffected: 8-202404CVE List
  • Cisco License On-Premaffected: 9-202406CVE List
  • Cisco License On-Premaffected: 9-202407CVE List
  • Cisco License On-Premaffected: 9-202410CVE List
  • Cisco License On-Premaffected: 9-202412CVE List
  • Cisco License On-Premaffected: 9-202501CVE List

References 1