Command Execution Vulnerability in Cisco License On-Prem Web Interface

CVE-2026-76437

What is CVE-2026-76437?

A serious vulnerability exists in the web-based user interface of Cisco License On-Prem, formerly known as Cisco Smart Software Manager On-Prem. This flaw arises from inadequate validation of user-submitted configurations. If an authenticated user with administrative access modifies the configurations, they could inadvertently allow an attacker to execute arbitrary commands on the system's underlying operating system with root privileges. Consequently, this vulnerability poses significant risks, including the potential for unauthorized administrative actions that could severely impact system operations.

References