Description
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76482 are related to issues with improper input verification that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-347.
Published: 2026-10-07
Score: 10 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Improper Input Verification
Action: Immediate Patch
AI Analysis

Impact

The vulnerability described in this CVE arises from improper input verification in Cisco License On-Prem. The weakness, classified as CWE‑347, means that the system does not adequately validate untrusted input. This can potentially allow exploitation that might affect the functionality or availability of the product; however, the specific impact is not detailed in the advisory.

Affected Systems

The affected product is Cisco License On-Prem, formerly known as Cisco Smart Software Manager On-Prem. No specific version range is listed in the advisory, so all installations of this product are considered at risk until the hardening release is applied.

Risk and Exploitability

The CVSS score of 10 indicates a critical severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote input exploitation, inferred from the vulnerability's description of improper input handling; this inference is expressly stated and not directly supported by the advisory.

Generated by OpenCVE AI on October 7, 2026 at 18:40 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the Cisco License On-Prem Security Hardening Release as issued by Cisco.
  • Restrict access to input interfaces to trusted users or systems, following best‑practice guidance for input handling.
  • Review and tighten custom input validation logic to ensure strict checks against malformed data.

Generated by OpenCVE AI on October 7, 2026 at 18:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 09 Oct 2026 09:15:00 +0000

Type Values Removed Values Added
First Time appeared Cisco
Cisco cisco License On-prem
Vendors & Products Cisco
Cisco cisco License On-prem

Wed, 07 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 07 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Description As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76482 are related to issues with improper input verification that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-347.
Title Cisco License On-Prem Security Hardening Release
Weaknesses CWE-347
References
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Cisco Cisco License On-prem
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-10-08T03:55:43.175Z

Reserved: 2026-08-19T12:02:03.639Z

Link: CVE-2026-76482

cve-icon Vulnrichment

Updated: 2026-10-07T19:18:49.335Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-07T17:17:00.773

Modified: 2026-10-08T20:08:45.857

Link: CVE-2026-76482

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-09T08:15:17Z

Weaknesses
  • CWE-347

    Improper Verification of Cryptographic Signature