Improper Verification of Cryptographic Signature in Cisco License On-Prem (formerly Cisco Smart Software Manager) - CVE-2026-76482
Published: October 9, 2026
Vulnerability identifier: #VU154030
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-76482
CWE-ID: CWE-347
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to disclose sensitive information, modify protected information, and cause a denial of service.
The vulnerability exists due to improper verification of cryptographic signatures in Cisco License On-Prem when cryptographic signatures are verified. A remote attacker can exploit improper signature verification over the network to disclose sensitive information, modify protected information, and cause a denial of service.
The issue is present regardless of software configuration. No user interaction is required. The assessed impact can extend beyond the vulnerable component's security authority.
Affected software
Cisco License On-Prem (formerly Cisco Smart Software Manager)
How to mitigate CVE-2026-76482
Install security update from vendor's website.
Cisco License On-Prem (formerly Cisco Smart Software Manager) - update to 10-202609