← CVE Radar
CVE-2026-76454Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.
9.1 CRITICALEPSS 0.58%Not in KEVNVD: Awaiting Analysis
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.1 | CRITICAL | 3.1cisco (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
Details
- CVE ID
- CVE-2026-76454
- Status
- Awaiting Analysis
- Assigner (CNA)
- cisco
- Published
- Oct 7, 2026
- Last modified
- 2026-10-08 20:08 UTC
- Weaknesses
- CWE-23 · Relative Path Traversal
Affected Products
As published by the CNA in the CVE record.
CiscoCisco License On-Prem36 version ranges
- 7-202001
- 1.1
- 6.3.0
- 8-202004
- 8-202006
- 1.2
- 1.3
- 8-202012
- 8-202010
- 8-202008
- 9-202201
- 8-202102
- 1.4
- 8-202105
- 8-202108
- 8-202112
- 8-202201
- 8-202206
- 8-202212
- 8-202302
- 8-202303
- 8-202304
- 8-202308
- 8-202401
- 8-202404
- 9-202406
- 9-202407
- 9-202410
- 9-202412
- 9-202501
- 9-202502
- 9-202504
- 9-202507
- 9-202510
- 9-202601
- 10-202606