CVE-2026-76454

LOWCVSS 9.1 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-23

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-07: 210-07
Referenced assets2 URLs
Full discourse2 posts
  • VulniPulse@vulnipulse

    CVE advisory (CRITICAL): CVE-2026-76454 - cisco: Cisco License (Smart Software Manager) On-Prem Vulnerabilities. https://vulnipulse.com/advisories/cisco-cisco-sa-ssm-access-nttb2dhe #CVE #CyberSecurity #Cisco #CiscoSSM

    0000032
    7 followersView on X
  • Kaitan ID Security@KaitanSecurity

    🚨 CRITICAL — CVE-2026-76454 A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manage… CVSS 9.1 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-76454 #Cisco #CyberSecurity #InfoSec

    0000041
    89 followersView on X

Explore more