SQL Injection Vulnerability in Cisco License On-Prem Management Interface

CVE-2026-76452

What is CVE-2026-76452?

A vulnerability exists in the web-based management interface of Cisco License On-Prem, allowing an authenticated, remote attacker to perform SQL injection attacks. This security flaw stems from insufficient validation of user-supplied input, enabling the attacker to send crafted requests that could access sensitive data within the application's internal database, potentially exposing information not typically available to administrative users. Properly managing administrative credentials and input validation is crucial to mitigating risks associated with this vulnerability.

References