Posting Date: 2026/10/15

【Vulnerability Alert】Cisco License (Smart Software Manager) On-Prem has 2 critical security vulnerabilities

  • Subject: 【Vulnerability Alert】Cisco License (Smart Software Manager) On-Prem has 2 critical security vulnerabilities


  • Description:
    • Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000019
    • Cisco has released critical security vulnerability advisories for its License (Smart Software Manager) On-Prem (CVE-2026-20328, CVE-2026-76454; both with CVSS scores of 9.1).
    • 【CVE-2026-76454】 This vulnerability exists in the Cisco Smart Licensing Utility API and may allow an unauthenticated remote attacker to write arbitrary files to the system or cause a DoS attack on the affected application.
    • 【CVE-2026-20328】 This vulnerability exists in the Web management interface and may allow an unauthenticated remote attacker to obtain unauthorized access to the affected application.
  • Affected Platforms:
    • Cisco License On-Prem versions 9-202601 (inclusive) and earlier, Cisco License On-Prem versions 10-202608 (exclusive) and earlier
  • Recommended Actions:
    • Please update to Cisco License On-Prem version 10-202608 (inclusive) or later
  • References:
    1. https://www.twcert.org.tw/tw/cp-169-11283-7536b-1.html

Computer and Communication Center
Network System Division