Skip to content
9.1 Critical

CVE-2026-76454 A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager…

Description

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.

Affected products and versions

Product Affected versions Fixed in
Cisco License On-Prem 10-202606 No fix stated
Cisco License On-Prem 9 9-202201 → 9-202601 No fix stated
Cisco License On-Prem 8 8-202004 → 8-202404 No fix stated
Cisco License On-Prem 7-202001 No fix stated
Cisco License On-Prem 6.3.0 No fix stated
Cisco License On-Prem 1.4 No fix stated
Cisco License On-Prem 1.3 No fix stated
Cisco License On-Prem 1.2 No fix stated
Cisco License On-Prem 1.1 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 8 CVEs of Cisco License On-Prem →
Track this CVE