Posting Date: 2026/10/19
【Vulnerability Alert】Cisco License (Smart Software Manager) On-Prem has 4 critical security vulnerabilities
- Subject:Cisco License (Smart Software Manager) On-Prem has 4 critical security vulnerabilities
- Description:
- Forwarded from the TWCERT/CC Security Alert TWCERTCC-200-202610-00000025
- During an internal security review, the development team of Cisco License (Smart Software Manager) On-Prem identified multiple security vulnerabilities, which have now been fixed. There is currently no evidence that these vulnerabilities have been actively exploited. To help customers deploy security updates in a timely manner and streamline the vulnerability disclosure process, Cisco has published the related vulnerability information and remediation recommendations. CVE-2026-76480, CVSS: 9.8, missing authentication for a critical function.
- CVE-2026-76482, CVSS: 10.0, improper validation of cryptographic signatures.
- CVE-2026-76483, CVSS: 9.1, insufficient protection of certificates.
- CVE-2026-76484, CVSS: 8.8, code injection attack.
- Affected Platforms:
- Versions prior to and including Cisco License On-Prem 9-202601, versions prior to and including Cisco License On-Prem 10-202608
- Recommended Actions:
- Please update to versions from Cisco License On-Prem 10-202609 (inclusive) onward
- References:
Computer and Communication Center
Network System Division
