Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000019
Cisco has released critical security vulnerability advisories for its License (Smart Software Manager) On-Prem (CVE-2026-20328, CVE-2026-76454; both with CVSS scores of 9.1).
【CVE-2026-76454】 This vulnerability exists in the Cisco Smart Licensing Utility API and may allow an unauthenticated remote attacker to write arbitrary files to the system or cause a DoS attack on the affected application.
【CVE-2026-20328】 This vulnerability exists in the Web management interface and may allow an unauthenticated remote attacker to obtain unauthorized access to the affected application.
Affected Platforms:
Cisco License On-Prem versions 9-202601 (inclusive) and earlier, Cisco License On-Prem versions 10-202608 (exclusive) and earlier
Recommended Actions:
Please update to Cisco License On-Prem version 10-202608 (inclusive) or later