CVE-2026-76480 PUBLISHED

Cisco License On-Prem Security Hardening Release

Assigner: cisco
Reserved: 19.08.2026 Published: 07.10.2026 Updated: 08.10.2026

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76480 are related to issues with improper authentication that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-306.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Product Status

Vendor Cisco
Product Cisco License On-Prem
Versions Default: unknown
  • Version 7-202001 is affected
  • Version 1.1 is affected
  • Version 6.3.0 is affected
  • Version 8-202004 is affected
  • Version 8-202006 is affected
  • Version 1.2 is affected
  • Version 1.3 is affected
  • Version 8-202012 is affected
  • Version 8-202010 is affected
  • Version 8-202008 is affected
  • Version 9-202201 is affected
  • Version 8-202102 is affected
  • Version 1.4 is affected
  • Version 8-202105 is affected
  • Version 8-202108 is affected
  • Version 8-202112 is affected
  • Version 8-202201 is affected
  • Version 8-202206 is affected
  • Version 8-202212 is affected
  • Version 8-202302 is affected
  • Version 8-202303 is affected
  • Version 8-202304 is affected
  • Version 8-202308 is affected
  • Version 8-202401 is affected
  • Version 8-202404 is affected
  • Version 9-202406 is affected
  • Version 9-202407 is affected
  • Version 9-202410 is affected
  • Version 9-202412 is affected
  • Version 9-202501 is affected
  • Version 9-202502 is affected
  • Version 9-202504 is affected
  • Version 9-202507 is affected
  • Version 9-202510 is affected
  • Version 9-202601 is affected
  • Version 10-202606 is affected
  • Version 10-202608 is affected

Exploits

The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

References

Problem Types

  • Missing Authentication for Critical Function cwe