CVE-2026-76482— Cisco License On-Prem Security Hardening Release
Quick assessment
Affected
Cisco Cisco License On-Prem
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
作为思科持续致力于主动安全与产品质量的一部分，思科 License On-Prem（前身为思科 Smart Software Manager On-Prem，简称 SSM On-Prem）工程团队开展了全面内部安全审查。该审查促使团队发布了加强软件安全的更新版本，以修复多个内部发现的安全漏洞。 由 CVE-2026-76482 跟踪记录的漏洞与不当输入验证问题相关，这些问题统一归类于通用弱点枚举（CWE）体系中的 CWE-347 支柱类别。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76482
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco License On-Prem Security Hardening Release
Source: CVE Program / CVE List V5
Vulnerability Description
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76482 are related to issues with improper input verification that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-347.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
密码学签名的验证不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco License On-Prem | 7-202001 | - |
|
II. Public POCs for CVE-2026-76482
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76482
请登录查看更多情报信息。
Other References for CVE-2026-76482 (1)
Same Patch Batch · Cisco · 2026-10-07 · 36 CVEs total
| CVE-2026-76465 | 9.8 CRITICAL | Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability |
| CVE-2026-76455 | 9.8 CRITICAL | Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vu |
| CVE-2026-76471 | 9.8 CRITICAL | Cisco NX-OS Software NX-API Remote Code Execution Vulnerability |
| CVE-2026-76480 | 9.8 CRITICAL | Cisco License On-Prem Security Hardening Release |
| CVE-2026-76500 | 9.8 CRITICAL | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Impro |
| CVE-2026-76501 | 9.8 CRITICAL | Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Code Execution Vulnerability |
| CVE-2026-76498 | 9.8 CRITICAL | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Impro |
| CVE-2026-76499 | 9.8 CRITICAL | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Impro |
| CVE-2026-76485 | 9.8 CRITICAL | Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerab |
| CVE-2026-76486 | 9.8 CRITICAL | Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerab |
| CVE-2026-76464 | 9.6 CRITICAL | Cisco Meraki Hardening Release October 2026 - Buffer Management Vulnerabilities |
| CVE-2026-76454 | 9.1 CRITICAL | Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability |
| CVE-2026-76483 | 9.1 CRITICAL | Cisco License On-Prem Security Hardening Release |
| CVE-2026-20328 | 9.1 CRITICAL | Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability |
| CVE-2026-76453 | 8.8 HIGH | Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vu |
| CVE-2026-76484 | 8.8 HIGH | Cisco License On-Prem Security Hardening Release |
| CVE-2026-76463 | 8.8 HIGH | Cisco Meraki Security Hardening Release: October 2026 - Improper Access Control Vulnerabil |
| CVE-2026-76459 | 8.8 HIGH | Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulner |
| CVE-2026-76470 | 8.8 HIGH | Cisco Meraki Hardening Release - Incorrect Calculation Vulnerabilities |
| CVE-2026-76472 | 8.8 HIGH | Cisco Meraki Security Hardening Release October 2026 - Improper Neutralization of Special |
Showing top 20 of 36 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco License On-Prem
-
CVE-2026-76484
Cisco License On-Prem Security Hardening Release -
CVE-2026-76483
Cisco License On-Prem Security Hardening Release -
CVE-2026-76480
Cisco License On-Prem Security Hardening Release -
CVE-2026-76454
Cisco Smart Software Manager On-Prem Unauthenticated API Vul -
CVE-2026-76437
Cisco Smart Software Manager On-Prem Command Injection Vulne
Same vendor: Cisco
-
CVE-2026-76472
Cisco Meraki Security Hardening Release October 2026 - Impro -
CVE-2026-76467
Cisco Meraki Software Hardening Release - Resource Lifetime -
CVE-2026-76470
Cisco Meraki Hardening Release - Incorrect Calculation Vulne -
CVE-2026-76469
Cisco Meraki Security Hardening Release: October 2026 Insuff -
CVE-2026-76468
Cisco Meraki Hardening Release - Input Validation Vulnerabil
Same weakness: CWE-347
-
CVE-2026-25302
Improper Verification of Cryptographic Signature in Boot -
CVE-2026-77805
Weak Executable Signature Verification Vulnerability in Prog -
CVE-2026-105161
invariant-systems-ai aiir Policy Gate signature verification -
CVE-2026-105118
OpenAM before 16.1.3 Open Redirect via Unverified id_token_h -
CVE-2026-71891
BLS12-381 key validation accepts a public key built on a for
V. Comments for CVE-2026-76482
No comments yet