Code Injection Vulnerability in Cisco License On-Prem Software
CVE-2026-76484

8.8HIGH

Key Information:

Vendor

Cisco
Status
Cisco License On-prem
Vendor
CVE Published:
7 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76484?

A code injection vulnerability in Cisco License On-Prem, previously known as Cisco Smart Software Manager On-Prem, has been identified. This issue arises from inadequate protection against unauthorized code execution, compromising system integrity. Cisco's engineering team has undertaken a thorough internal security review, resulting in important software hardening measures to mitigate these risks, ensuring better protection against exploitation. It is crucial for users to apply the recommended updates to enhance their security posture.

Affected Version(s)

Cisco License On-Prem 7-202001

Cisco License On-Prem 1.1

Cisco License On-Prem 6.3.0

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.