Vulnerability Intelligence Report
Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability
CVE-2026-76454
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.
No Active Exploit Signals
CVSS Base Score
9.1
CRITICAL
Exploitability:3.9
Impact Score:5.2
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-23 ↗Relative Path Traversal
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Cisco | Cisco License On-Prem | 7-202001 (affected), 1.1 (affected), 6.3.0 (affected), 8-202004 (affected), 8-202006 (affected), 1.2 (affected), 1.3 (affected), 8-202012 (affected), 8-202010 (affected), 8-202008 (affected), 9-202201 (affected), 8-202102 (affected), 1.4 (affected), 8-202105 (affected), 8-202108 (affected), 8-202112 (affected), 8-202201 (affected), 8-202206 (affected), 8-202212 (affected), 8-202302 (affected), 8-202303 (affected), 8-202304 (affected), 8-202308 (affected), 8-202401 (affected), 8-202404 (affected), 9-202406 (affected), 9-202407 (affected), 9-202410 (affected), 9-202412 (affected), 9-202501 (affected), 9-202502 (affected), 9-202504 (affected), 9-202507 (affected), 9-202510 (affected), 9-202601 (affected), 10-202606 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Cisco Systems, Inc. · Hosted Service · USA |
| Reserved | 2026-08-19T12:02:03 |
| Published | 2026-10-07T16:12:31 |
| Last Updated | 2026-10-07T16:54:07 |
Community Chatter & Buzz