CISCO-SA-SSM-ACCESS-NTTB2DHE
Vulnerability from csaf_cisco - Published: 2026-10-07 16:00 - Updated: 2026-10-07 16:00Summary
Cisco License (Smart Software Manager) On-Prem Vulnerabilities
Notes
Summary: Multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow a remote attacker to gain unauthorized access, access sensitive information, cause a denial of service (DoS) condition, or elevate privileges.
For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
For further documentation of improvements and fixes in Cisco License On-Prem, see Cisco License (Smart Software Manager) On-Prem Security Hardening Release ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ssm-Ph77wdhf"].
Vulnerable Products: These vulnerabilities affect Cisco License On-Prem, regardless of the software configuration. Previous releases of this software were called Cisco SSM On-Prem, and they are also affected.
For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.
Products Confirmed Not Vulnerable: Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by these vulnerabilities.
Cisco has confirmed that these vulnerabilities do not affect Cisco Smart Licensing Utility.
Details: The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability. In addition, a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerabilities.
Details about the vulnerabilities are as follows:
CVE-2026-20328: Cisco License (Smart Software Manager) On-Prem Arbitrary Account Password Reset Vulnerability
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application.
This vulnerability is due to improper checks during the password reset process. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to reset the password of an arbitrary account, including high-privileged administrative user accounts, possibly allowing the attacker to gain unauthorized access to the application as any user.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Bug ID(s): CSCwv53803 ["https://bst.cisco.com/bugsearch/bug/CSCwv53803"]
CVE ID: CVE-2026-20328
Security Impact Rating (SIR): Critical
CVSS Base Score: 9.1
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVE-2026-76454: Cisco License (Smart Software Manager) On-Prem Unauthenticated API Vulnerability
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application.
This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Bug ID(s): CSCwu54774 ["https://bst.cisco.com/bugsearch/bug/CSCwu54774"]
CVE ID: CVE-2026-76454
Security Impact Rating (SIR): Critical
CVSS Base Score: 9.1
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVE-2026-76437: Cisco License (Smart Software Manager) On-Prem Command Injection Vulnerability
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system.
This vulnerability is due to improper validation of user-supplied content within configurations that are submitted to the web-based management interface. An attacker could exploit this vulnerability by updating configurations within the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.
To exploit this vulnerability, the attacker must have valid administrative credentials. Because only an attacker who already holds system administrator privileges can exploit the vulnerability, the only additional privileges gained include the ability to turn off the system, which an administrative user could not normally do.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Bug ID(s): CSCwv53807 ["https://bst.cisco.com/bugsearch/bug/CSCwv53807"]
CVE ID: CVE-2026-76437
Security Impact Rating (SIR): Medium
CVSS Base Score: 4.9
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVE-2026-76452: Cisco License (Smart Software Manager) On-Prem SQL Injection Vulnerability
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read additional contents of the internal database of an affected application that should not normally be accessible to administrative users, thus impacting system confidentiality.
To exploit this vulnerability, the attacker must have valid administrative user credentials on the affected application.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Bug ID(s): CSCwv53814 ["https://bst.cisco.com/bugsearch/bug/CSCwv53814"]
CVE ID: CVE-2026-76452
Security Impact Rating (SIR): Medium
CVSS Base Score: 4.9
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Workarounds: There are no workarounds that address these vulnerabilities.
Fixed Software: Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To remediate this vulnerability and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.
Fixed Releases
In the following table, the left column lists Cisco software releases. The right column indicates whether a release is affected by the vulnerabilities that are described in this advisory and the first release that includes the fix for these vulnerabilities. Customers are advised to upgrade to an appropriate fixed software release ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"] as indicated in this section.
Cisco License On-Prem Release First Fixed Release 9-202601 and earlier1 Migrate to a fixed release. Earlier than 10-202608 10-202608 10-202609 Not vulnerable.
1. These releases of Cisco License On-Prem were known as Cisco Smart Software Manager On-Prem. For information about upgrade and migration, see the Cisco License On-Prem Release Notes ["https://www.cisco.com/web/software/286326948/176444/Cisco_License_On-Prem_10-202609_Release_Notes.pdf"].
The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.
Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
For additional information on Cisco's vulnerability management, disclosure cadence, and software patching strategy, see Cisco's Transition to a Risk-Based Vulnerability Disclosure Model ["https://sec.cloudapps.cisco.com/security/center/resources/risk-based-disclosure"].
Exploitation and Public Announcements: The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.
Source: Cisco would like to thank the following researchers for reporting these vulnerabilities:
Gabriele Paris of NATO Cyber Security Centre (NCSC): CVE-2026-20328, CVE-2026-76437, and CVE-2026-76452
Trung Nguyen (@everping) of CyStack: CVE-2026-76454
Legal Disclaimer: SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT
The Cisco Support and Downloads ["https://www.cisco.com/c/en/us/support/index.html"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid.
Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.
When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories ["https://www.cisco.com/go/psirt"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"] or their contracted maintenance providers.
LEGAL DISCLAIMER DETAILS
CISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
Copies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories ["https://www.cisco.com/go/psirt"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"] for more information.
9.1 (Critical)
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-274027 | — |
Vendor Fix
fix
|
|
|
1.1
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
1.2
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
1.3
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
1.4
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202006
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
7-202001
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202004
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202012
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202010
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202008
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202105
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202108
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202102
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202112
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202201
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202206
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202212
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202302
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202304
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202404
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202303
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202308
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202401
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202406
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
6.3.0
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202407
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202410
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202412
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202501
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202502
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202504
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202507
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202510
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
10-202606
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202601
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
4.9 (Medium)
Affected products
Known affected
36 products, the same list as for
CVE-2026-20328
4.9 (Medium)
Affected products
Known affected
36 products, the same list as for
CVE-2026-20328
9.1 (Critical)
Affected products
Known affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-274027 | — |
Vendor Fix
fix
|
|
|
1.1
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
1.2
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
1.3
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
1.4
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202006
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
7-202001
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202004
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202012
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202010
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202008
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202105
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202108
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202102
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202112
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202201
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202206
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202212
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202302
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202304
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202404
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202303
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202308
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
8-202401
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202406
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
6.3.0
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202407
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202410
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202412
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202501
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202502
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202504
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202507
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202510
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
10-202606
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
9-202601
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
|
|
10-202608
Cisco / Cisco License On-Prem
|
— |
Vendor Fix
fix
|
References
14 references
Acknowledgments
{
"document": {
"acknowledgments": [
{
"summary": "Cisco would like to thank the following researchers for reporting these vulnerabilities:\r\n\r\nGabriele Paris of NATO Cyber Security Centre (NCSC): CVE-2026-20328, CVE-2026-76437, and CVE-2026-76452\r\nTrung Nguyen (@everping) of CyStack: CVE-2026-76454"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow a remote attacker to gain unauthorized access, access sensitive information, cause a denial of service (DoS) condition, or elevate privileges.\r\n\r\nFor more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r\nCisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.\r\n\r\n\r\n\r\nFor further documentation of improvements and fixes in Cisco License On-Prem, see Cisco License (Smart Software Manager) On-Prem Security Hardening Release [\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ssm-Ph77wdhf\"].",
"title": "Summary"
},
{
"category": "general",
"text": "These vulnerabilities affect Cisco License On-Prem, regardless of the software configuration. Previous releases of this software were called Cisco SSM On-Prem, and they are also affected.\r\n\r\nFor information about which Cisco software releases are vulnerable, see the Fixed Software [\"#fs\"] section of this advisory.",
"title": "Vulnerable Products"
},
{
"category": "general",
"text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by these vulnerabilities.\r\n\r\nCisco has confirmed that these vulnerabilities do not affect Cisco Smart Licensing Utility.",
"title": "Products Confirmed Not Vulnerable"
},
{
"category": "general",
"text": "The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability. In addition, a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerabilities.\r\n\r\nDetails about the vulnerabilities are as follows:\r\n\r\nCVE-2026-20328: Cisco License (Smart Software Manager) On-Prem Arbitrary Account Password Reset Vulnerability\r\n\r\nA vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application.\r\n\r\nThis vulnerability is due to improper checks during the password reset process. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to reset the password of an arbitrary account, including high-privileged administrative user accounts, possibly allowing the attacker to gain unauthorized access to the application as any user.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nBug ID(s): CSCwv53803 [\"https://bst.cisco.com/bugsearch/bug/CSCwv53803\"]\r\nCVE ID: CVE-2026-20328\r\nSecurity Impact Rating (SIR): Critical\r\nCVSS Base Score: 9.1\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\r\n\r\nCVE-2026-76454: Cisco License (Smart Software Manager) On-Prem Unauthenticated API Vulnerability\r\n\r\nA vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application.\r\n\r\nThis vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nBug ID(s): CSCwu54774 [\"https://bst.cisco.com/bugsearch/bug/CSCwu54774\"]\r\nCVE ID: CVE-2026-76454\r\nSecurity Impact Rating (SIR): Critical\r\nCVSS Base Score: 9.1\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\r\n\r\nCVE-2026-76437: Cisco License (Smart Software Manager) On-Prem Command Injection Vulnerability\r\n\r\nA vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system.\r\n\r\nThis vulnerability is due to improper validation of user-supplied content within configurations that are submitted to the web-based management interface. An attacker could exploit this vulnerability by updating configurations within the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.\r\n\r\nTo exploit this vulnerability, the attacker must have valid administrative credentials. Because only an attacker who already holds system administrator privileges can exploit the vulnerability, the only additional privileges gained include the ability to turn off the system, which an administrative user could not normally do.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nBug ID(s): CSCwv53807 [\"https://bst.cisco.com/bugsearch/bug/CSCwv53807\"]\r\nCVE ID: CVE-2026-76437\r\nSecurity Impact Rating (SIR): Medium\r\nCVSS Base Score: 4.9\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H\r\n\r\nCVE-2026-76452: Cisco License (Smart Software Manager) On-Prem SQL Injection Vulnerability\r\n\r\nA vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read additional contents of the internal database of an affected application that should not normally be accessible to administrative users, thus impacting system confidentiality.\r\n\r\nTo exploit this vulnerability, the attacker must have valid administrative user credentials on the affected application.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nBug ID(s): CSCwv53814 [\"https://bst.cisco.com/bugsearch/bug/CSCwv53814\"]\r\nCVE ID: CVE-2026-76452\r\nSecurity Impact Rating (SIR): Medium\r\nCVSS Base Score: 4.9\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"title": "Details"
},
{
"category": "general",
"text": "There are no workarounds that address these vulnerabilities.",
"title": "Workarounds"
},
{
"category": "general",
"text": "Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To remediate this vulnerability and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.\r\n Fixed Releases\r\nIn the following table, the left column lists Cisco software releases. The right column indicates whether a release is affected by the vulnerabilities that are described in this advisory and the first release that includes the fix for these vulnerabilities. Customers are advised to upgrade to an appropriate fixed software release [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"] as indicated in this section.\r\n Cisco License On-Prem Release First Fixed Release 9-202601 and earlier1 Migrate to a fixed release. Earlier than 10-202608 10-202608 10-202609 Not vulnerable.\r\n1. These releases of Cisco License On-Prem were known as Cisco Smart Software Manager On-Prem. For information about upgrade and migration, see the Cisco License On-Prem Release Notes [\"https://www.cisco.com/web/software/286326948/176444/Cisco_License_On-Prem_10-202609_Release_Notes.pdf\"].\r\nThe Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.",
"title": "Fixed Software"
},
{
"category": "general",
"text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.\r\n\r\nFor additional information on Cisco\u0027s vulnerability management, disclosure cadence, and software patching strategy, see Cisco\u0027s Transition to a Risk-Based Vulnerability Disclosure Model [\"https://sec.cloudapps.cisco.com/security/center/resources/risk-based-disclosure\"].",
"title": "Vulnerability Policy"
},
{
"category": "general",
"text": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.",
"title": "Exploitation and Public Announcements"
},
{
"category": "general",
"text": "Cisco would like to thank the following researchers for reporting these vulnerabilities:\r\n\r\nGabriele Paris of NATO Cyber Security Centre (NCSC): CVE-2026-20328, CVE-2026-76437, and CVE-2026-76452\r\nTrung Nguyen (@everping) of CyStack: CVE-2026-76454",
"title": "Source"
},
{
"category": "legal_disclaimer",
"text": "SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT\r\n\r\nThe Cisco Support and Downloads [\"https://www.cisco.com/c/en/us/support/index.html\"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid.\r\n\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories [\"https://www.cisco.com/go/psirt\"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"] or their contracted maintenance providers.\r\nLEGAL DISCLAIMER DETAILS\r\n\r\nCISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nCopies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories [\"https://www.cisco.com/go/psirt\"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"] for more information.",
"title": "Legal Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@cisco.com",
"issuing_authority": "Cisco PSIRT",
"name": "Cisco",
"namespace": "https://wwww.cisco.com"
},
"references": [
{
"category": "self",
"summary": "Cisco License (Smart Software Manager) On-Prem Vulnerabilities",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssm-access-nttb2dhE"
},
{
"category": "external",
"summary": "Cisco Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "Cisco License (Smart Software Manager) On-Prem Security Hardening Release",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ssm-Ph77wdhf"
},
{
"category": "external",
"summary": "CSCwv53803",
"url": "https://bst.cisco.com/bugsearch/bug/CSCwv53803"
},
{
"category": "external",
"summary": "CSCwu54774",
"url": "https://bst.cisco.com/bugsearch/bug/CSCwu54774"
},
{
"category": "external",
"summary": "CSCwv53807",
"url": "https://bst.cisco.com/bugsearch/bug/CSCwv53807"
},
{
"category": "external",
"summary": "CSCwv53814",
"url": "https://bst.cisco.com/bugsearch/bug/CSCwv53814"
},
{
"category": "external",
"summary": "fixed software release",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
},
{
"category": "external",
"summary": "Cisco License On-Prem Release Notes",
"url": "https://www.cisco.com/web/software/286326948/176444/Cisco_License_On-Prem_10-202609_Release_Notes.pdf"
},
{
"category": "external",
"summary": "Security Vulnerability Policy",
"url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "Cisco\u0027s Transition to a Risk-Based Vulnerability Disclosure Model",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/risk-based-disclosure"
},
{
"category": "external",
"summary": "Cisco Support and Downloads",
"url": "https://www.cisco.com/c/en/us/support/index.html"
},
{
"category": "external",
"summary": "Cisco Technical Assistance Center (TAC)",
"url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
},
{
"category": "external",
"summary": "the advisories",
"url": "https://www.cisco.com/go/psirt"
}
],
"title": "Cisco License (Smart Software Manager) On-Prem Vulnerabilities",
"tracking": {
"current_release_date": "2026-10-07T16:00:00+00:00",
"generator": {
"date": "2026-10-07T15:48:29+00:00",
"engine": {
"name": "TVCE"
}
},
"id": "cisco-sa-ssm-access-nttb2dhE",
"initial_release_date": "2026-10-07T16:00:00+00:00",
"revision_history": [
{
"date": "2026-10-07T15:48:09+00:00",
"number": "1.0.0",
"summary": "Initial public release."
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "service_pack",
"name": "7-202001",
"product": {
"name": "7-202001",
"product_id": "CSAFPID-284657"
}
}
],
"category": "product_version",
"name": "7"
},
{
"branches": [
{
"category": "service_pack",
"name": "8-202006",
"product": {
"name": "8-202006",
"product_id": "CSAFPID-284656"
}
},
{
"category": "service_pack",
"name": "8-202004",
"product": {
"name": "8-202004",
"product_id": "CSAFPID-284658"
}
},
{
"category": "service_pack",
"name": "8-202012",
"product": {
"name": "8-202012",
"product_id": "CSAFPID-284659"
}
},
{
"category": "service_pack",
"name": "8-202010",
"product": {
"name": "8-202010",
"product_id": "CSAFPID-284662"
}
},
{
"category": "service_pack",
"name": "8-202008",
"product": {
"name": "8-202008",
"product_id": "CSAFPID-284663"
}
},
{
"category": "service_pack",
"name": "8-202105",
"product": {
"name": "8-202105",
"product_id": "CSAFPID-284664"
}
},
{
"category": "service_pack",
"name": "8-202108",
"product": {
"name": "8-202108",
"product_id": "CSAFPID-284665"
}
},
{
"category": "service_pack",
"name": "8-202102",
"product": {
"name": "8-202102",
"product_id": "CSAFPID-284666"
}
},
{
"category": "service_pack",
"name": "8-202112",
"product": {
"name": "8-202112",
"product_id": "CSAFPID-286931"
}
},
{
"category": "service_pack",
"name": "8-202201",
"product": {
"name": "8-202201",
"product_id": "CSAFPID-286932"
}
},
{
"category": "service_pack",
"name": "8-202206",
"product": {
"name": "8-202206",
"product_id": "CSAFPID-289305"
}
},
{
"category": "service_pack",
"name": "8-202212",
"product": {
"name": "8-202212",
"product_id": "CSAFPID-294799"
}
},
{
"category": "service_pack",
"name": "8-202302",
"product": {
"name": "8-202302",
"product_id": "CSAFPID-294963"
}
},
{
"category": "service_pack",
"name": "8-202304",
"product": {
"name": "8-202304",
"product_id": "CSAFPID-301745"
}
},
{
"category": "service_pack",
"name": "8-202404",
"product": {
"name": "8-202404",
"product_id": "CSAFPID-301746"
}
},
{
"category": "service_pack",
"name": "8-202303",
"product": {
"name": "8-202303",
"product_id": "CSAFPID-301747"
}
},
{
"category": "service_pack",
"name": "8-202308",
"product": {
"name": "8-202308",
"product_id": "CSAFPID-301748"
}
},
{
"category": "service_pack",
"name": "8-202401",
"product": {
"name": "8-202401",
"product_id": "CSAFPID-301749"
}
}
],
"category": "product_version",
"name": "8"
},
{
"branches": [
{
"category": "service_pack",
"name": "1.1",
"product": {
"name": "1.1",
"product_id": "CSAFPID-280657"
}
},
{
"category": "service_pack",
"name": "1.2",
"product": {
"name": "1.2",
"product_id": "CSAFPID-280658"
}
},
{
"category": "service_pack",
"name": "1.3",
"product": {
"name": "1.3",
"product_id": "CSAFPID-284654"
}
},
{
"category": "service_pack",
"name": "1.4",
"product": {
"name": "1.4",
"product_id": "CSAFPID-284655"
}
}
],
"category": "product_version",
"name": "1"
},
{
"branches": [
{
"category": "service_pack",
"name": "9-202406",
"product": {
"name": "9-202406",
"product_id": "CSAFPID-302059"
}
},
{
"category": "service_pack",
"name": "9-202407",
"product": {
"name": "9-202407",
"product_id": "CSAFPID-307083"
}
},
{
"category": "service_pack",
"name": "9-202410",
"product": {
"name": "9-202410",
"product_id": "CSAFPID-307084"
}
},
{
"category": "service_pack",
"name": "9-202412",
"product": {
"name": "9-202412",
"product_id": "CSAFPID-307085"
}
},
{
"category": "service_pack",
"name": "9-202501",
"product": {
"name": "9-202501",
"product_id": "CSAFPID-307086"
}
},
{
"category": "service_pack",
"name": "9-202502",
"product": {
"name": "9-202502",
"product_id": "CSAFPID-307087"
}
},
{
"category": "service_pack",
"name": "9-202504",
"product": {
"name": "9-202504",
"product_id": "CSAFPID-307088"
}
},
{
"category": "service_pack",
"name": "9-202507",
"product": {
"name": "9-202507",
"product_id": "CSAFPID-307089"
}
},
{
"category": "service_pack",
"name": "9-202510",
"product": {
"name": "9-202510",
"product_id": "CSAFPID-307090"
}
},
{
"category": "service_pack",
"name": "9-202601",
"product": {
"name": "9-202601",
"product_id": "CSAFPID-308933"
}
}
],
"category": "product_version",
"name": "9"
},
{
"branches": [
{
"category": "service_pack",
"name": "6.3.0",
"product": {
"name": "6.3.0",
"product_id": "CSAFPID-304907"
}
}
],
"category": "product_version",
"name": "6"
},
{
"branches": [
{
"category": "service_pack",
"name": "10-202606",
"product": {
"name": "10-202606",
"product_id": "CSAFPID-308932"
}
},
{
"category": "service_pack",
"name": "10-202608",
"product": {
"name": "10-202608",
"product_id": "CSAFPID-309136"
}
}
],
"category": "product_version",
"name": "10"
}
],
"category": "product_family",
"name": "Cisco License On-Prem"
},
{
"category": "product_name",
"name": "Cisco Smart Software Manager On-Prem",
"product": {
"name": "Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-277989"
}
},
{
"category": "product_name",
"name": "Cisco License On-Prem",
"product": {
"name": "Cisco License On-Prem",
"product_id": "CSAFPID-309325"
}
}
],
"category": "vendor",
"name": "Cisco"
}
],
"relationships": [
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 7-202001 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284657:277989"
},
"product_reference": "CSAFPID-284657",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202006 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284656:277989"
},
"product_reference": "CSAFPID-284656",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202004 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284658:277989"
},
"product_reference": "CSAFPID-284658",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202012 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284659:277989"
},
"product_reference": "CSAFPID-284659",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202010 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284662:277989"
},
"product_reference": "CSAFPID-284662",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202008 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284663:277989"
},
"product_reference": "CSAFPID-284663",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202105 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284664:277989"
},
"product_reference": "CSAFPID-284664",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202108 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284665:277989"
},
"product_reference": "CSAFPID-284665",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202102 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284666:277989"
},
"product_reference": "CSAFPID-284666",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202112 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-286931:277989"
},
"product_reference": "CSAFPID-286931",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202201 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-286932:277989"
},
"product_reference": "CSAFPID-286932",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202206 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-289305:277989"
},
"product_reference": "CSAFPID-289305",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202212 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-294799:277989"
},
"product_reference": "CSAFPID-294799",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202302 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-294963:277989"
},
"product_reference": "CSAFPID-294963",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202304 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-301745:277989"
},
"product_reference": "CSAFPID-301745",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202404 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-301746:277989"
},
"product_reference": "CSAFPID-301746",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202303 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-301747:277989"
},
"product_reference": "CSAFPID-301747",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202308 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-301748:277989"
},
"product_reference": "CSAFPID-301748",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 8-202401 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-301749:277989"
},
"product_reference": "CSAFPID-301749",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 1.1 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-280657:277989"
},
"product_reference": "CSAFPID-280657",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 1.2 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-280658:277989"
},
"product_reference": "CSAFPID-280658",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 1.3 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284654:277989"
},
"product_reference": "CSAFPID-284654",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 1.4 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-284655:277989"
},
"product_reference": "CSAFPID-284655",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202406 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-302059:277989"
},
"product_reference": "CSAFPID-302059",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202407 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-307083:277989"
},
"product_reference": "CSAFPID-307083",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202410 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-307084:277989"
},
"product_reference": "CSAFPID-307084",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202412 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-307085:277989"
},
"product_reference": "CSAFPID-307085",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202501 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-307086:277989"
},
"product_reference": "CSAFPID-307086",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202502 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-307087:277989"
},
"product_reference": "CSAFPID-307087",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202504 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-307088:277989"
},
"product_reference": "CSAFPID-307088",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202507 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-307089:277989"
},
"product_reference": "CSAFPID-307089",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202510 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-307090:277989"
},
"product_reference": "CSAFPID-307090",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 9-202601 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-308933:277989"
},
"product_reference": "CSAFPID-308933",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 6.3.0 when installed on Cisco Smart Software Manager On-Prem",
"product_id": "CSAFPID-304907:277989"
},
"product_reference": "CSAFPID-304907",
"relates_to_product_reference": "CSAFPID-277989"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 10-202606 when installed on Cisco License On-Prem",
"product_id": "CSAFPID-308932:309325"
},
"product_reference": "CSAFPID-308932",
"relates_to_product_reference": "CSAFPID-309325"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco License On-Prem 10-202608 when installed on Cisco License On-Prem",
"product_id": "CSAFPID-309136:309325"
},
"product_reference": "CSAFPID-309136",
"relates_to_product_reference": "CSAFPID-309325"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20328",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwv53803"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933"
]
},
"release_date": "2026-10-07T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933"
]
}
],
"title": "Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability"
},
{
"cve": "CVE-2026-76437",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwv53807"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933"
]
},
"release_date": "2026-10-07T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933"
]
}
],
"title": "Cisco Smart Software Manager On-Prem Command Injection Vulnerability"
},
{
"cve": "CVE-2026-76452",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwv53814"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933"
]
},
"release_date": "2026-10-07T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933"
]
}
],
"title": "Cisco Smart Software Manager On-Prem SQL Injection Vulnerability"
},
{
"cve": "CVE-2026-76454",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwu54774"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933",
"CSAFPID-309136"
]
},
"release_date": "2026-10-07T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933",
"CSAFPID-309136"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-274027",
"CSAFPID-280657",
"CSAFPID-280658",
"CSAFPID-284654",
"CSAFPID-284655",
"CSAFPID-284656",
"CSAFPID-284657",
"CSAFPID-284658",
"CSAFPID-284659",
"CSAFPID-284662",
"CSAFPID-284663",
"CSAFPID-284664",
"CSAFPID-284665",
"CSAFPID-284666",
"CSAFPID-286931",
"CSAFPID-286932",
"CSAFPID-289305",
"CSAFPID-294799",
"CSAFPID-294963",
"CSAFPID-301745",
"CSAFPID-301746",
"CSAFPID-301747",
"CSAFPID-301748",
"CSAFPID-301749",
"CSAFPID-302059",
"CSAFPID-304907",
"CSAFPID-307083",
"CSAFPID-307084",
"CSAFPID-307085",
"CSAFPID-307086",
"CSAFPID-307087",
"CSAFPID-307088",
"CSAFPID-307089",
"CSAFPID-307090",
"CSAFPID-308932",
"CSAFPID-308933",
"CSAFPID-309136"
]
}
],
"title": "Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…