Unauthenticated Access Vulnerability in Cisco License On-Prem Management Interface

CVE-2026-20328

What is CVE-2026-20328?

A vulnerability in the web-based management interface of Cisco License On-Prem can potentially allow unauthenticated remote attackers to exploit improper checks during the password reset process. By crafting a malicious request, an attacker could reset passwords for arbitrary accounts, including those with administrative privileges, leading to unauthorized access to the application. This presents a significant risk as it may enable attackers to act as legitimate users and perform sensitive actions within the system.

References