Insufficiently protected credentials in Cisco License On-Prem (formerly Cisco Smart Software Manager) - CVE-2026-76483
Published: October 9, 2026
Vulnerability identifier: #VU154031
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-76483
CWE-ID: CWE-522
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to disclose sensitive information and modify protected information.
The vulnerability exists due to insufficient protection of credentials in Cisco License On-Prem when credentials are handled. A remote attacker can exploit insufficient credential protection over the network to disclose sensitive information and modify protected information.
The issue is present regardless of software configuration. No user interaction is required.
Affected software
Cisco License On-Prem (formerly Cisco Smart Software Manager)
How to mitigate CVE-2026-76483
Install security update from vendor's website.
Cisco License On-Prem (formerly Cisco Smart Software Manager) - update to 10-202609