SB2026100920 - Multiple vulnerabilities in Cisco License On-Prem

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026100920

SB2026100920 - Multiple vulnerabilities in Cisco License On-Prem

Published: October 9, 2026

Security Bulletin ID SB2026100920
CSH Severity
High
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

High 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 vulnerabilities.


1) Missing Authorization (CVE-ID: CVE-2026-20328)

CWE-ID: CWE-862 - Missing Authorization

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to reset arbitrary account passwords and gain unauthorized access to the application.

The vulnerability exists due to improper authorization checks in the web-based management interface when processing password reset requests. A remote attacker can send a malicious request to reset arbitrary account passwords and gain unauthorized access to the application.

Target accounts can include high-privileged administrative accounts.


2) Command injection (CVE-ID: CVE-2026-76437)

CWE-ID: CWE-77 - Command injection

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote privileged user to execute arbitrary operating system commands with root privileges.

The vulnerability exists due to command injection caused by improper validation of user-supplied configuration content in the web-based management interface when processing configuration updates. A remote privileged user can submit crafted configuration updates to execute arbitrary operating system commands with root privileges.

The only additional capability beyond existing system administrator permissions is shutting down the system.


3) SQL injection (CVE-ID: CVE-2026-76452)

CWE-ID: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote privileged user to disclose otherwise inaccessible contents of the application's internal database.

The vulnerability exists due to SQL injection caused by insufficient validation of user-supplied input in the web-based management interface when handling requests. A remote privileged user can send a crafted request to disclose otherwise inaccessible contents of the application's internal database.


4) Missing Authentication for Critical Function (CVE-ID: CVE-2026-76454)

CWE-ID: CWE-306 - Missing Authentication for Critical Function

CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to write arbitrary system files or cause a denial of service.

The vulnerability exists due to improper input validation and missing authentication in the Cisco Smart Licensing Utility API of Cisco License On-Prem when handling API requests. A remote attacker can send a crafted request to write arbitrary system files or cause a denial of service.


Remediation

Install update from vendor's website.

References