Threat level Severe
Contact
Critical 9.8
CVE-2026-76480

Cisco License On-Prem — missing authentication.

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a…

WeaknessCWE-306: Missing authentication
Published Updated Source NVD
Read vendor advisoryView on NVD
CVSS 3.1
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit chance, 30 days
0.4%
Higher than 30% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Unknown
Check the vendor advisory

What happened

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76480 are related to issues with improper authentication that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-306.

What to do

  1. 01Check whether you run Cisco License On-Prem, and which version.
  2. 02Follow the vendor advisory for a fix or a workaround.

References

Timeline · UTC

  1. Published to NVD
  2. NVD record updated

Also actively exploited

CVE-2026-764188.6Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareCVE-2026-1146259.9Arista VeloCloud OrchestratorCVE-2026-1114979.8Google Brotli
Vendor
Cisco23 CVEs in 30 days
All Cisco CVEs

Other CVEs in Cisco License On-Prem

4 more CVEs

All Cisco License On-Prem CVEs
10.0Cisco License On-Prem — improper signature verification.EPSS 0.2%9.1Cisco Cisco License On-Prem — This review resulted in software hardening releases that address multiple internally discovered…EPSS 0.2%9.1Cisco License On-Prem — path traversal.EPSS 0.6%9.1Cisco License On-Prem — missing authorization.EPSS 0.5%