/
← Voltar ao feed
critical

Cisco patches multiple vulnerabilities in Cisco License (Smart Software Manager) On-Prem, rated Critical

1 fonte(s) · 1 atualização(ões) · publicado 07/10/2026 13:00 · coletado há 4 dias

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Cisco published a security advisory covering multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem). A remote attacker could exploit them to gain unauthorized access, access sensitive information, cause a denial of service (DoS) condition, or elevate privileges. Cisco rates the Security Impact as Critical and tracks the flaws as CVE-2026-20328, CVE-2026-76437, CVE-2026-76452 and CVE-2026-76454. Software updates are available, and there are no workarounds. The advisory does not state that exploitation has occurred in the wild.

Detalhes técnicos

  • Affected components: the web-based management interface and API endpoints of Cisco License On-Prem (formerly Cisco SSM On-Prem).
  • Potential impacts: unauthorized access, sensitive information disclosure, DoS and privilege escalation.
  • The article does not give per-CVE details, CVSS scores or affected version ranges. These are in the Details section of the advisory.

Remediação

  • Apply the software updates released by Cisco. See the Cisco License (Smart Software Manager) On-Prem Security Hardening Release for fixes and improvements.
  • No workarounds exist, so patching is the only mitigation.

Linha do tempo

  1. sec.cloudapps.cisco.com ↗ · pub. 07/10/2026 13:00 · coletado 19/10 18:01 primeiro registro só resumo do feed

    Cisco patches multiple vulnerabilities in Cisco License (Smart Software Manager) On-Prem, rated Critical

    ler a análise desta fonte

    Cisco published a security advisory covering multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem). A remote attacker could exploit them to gain unauthorized access, access sensitive information, cause a denial of service (DoS) condition, or elevate privileges. Cisco rates the Security Impact as Critical and tracks the flaws as CVE-2026-20328, CVE-2026-76437, CVE-2026-76452 and CVE-2026-76454. Software updates are available, and there are no workarounds. The advisory does not state that exploitation has occurred in the wild.

    Technical Details

    • Affected components: the web-based management interface and API endpoints of Cisco License On-Prem (formerly Cisco SSM On-Prem).
    • Potential impacts: unauthorized access, sensitive information disclosure, DoS and privilege escalation.
    • The article does not give per-CVE details, CVSS scores or affected version ranges. These are in the Details section of the advisory.

    Remediation

    • Apply the software updates released by Cisco. See the Cisco License (Smart Software Manager) On-Prem Security Hardening Release for fixes and improvements.
    • No workarounds exist, so patching is the only mitigation.