Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026101510103434 | Publication Time | 2026-10-15 10:59:36 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-10-15 10:59:36 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】Cisco License (Smart Software Manager) On-Prem Has Two Critical Security Vulnerabilities |
|||
| [Content] Forwarded from TWCERTCC-200-202610-00000019 Cisco has issued an advisory regarding critical security vulnerabilities in its License (Smart Software Manager) On-Prem product (CVE-2026-20328 and CVE-2026-76454, both with a CVSS score of 9.1). 【CVE-2026-76454】 This vulnerability exists in the Cisco Smart Licensing Utility API and may allow an unauthenticated remote attacker to write arbitrary files to the system or cause a Denial-of-Service (DoS) attack on the affected application. 【CVE-2026-20328】 This vulnerability exists in the web management interface and may allow an unauthenticated remote attacker to gain unauthorized access to the affected application. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] Cisco License On-Prem version 9-202601 and earlier (inclusive), Cisco License On-Prem versions earlier than 10-202608 (excluding version 10-202608) |
|||
| [Recommended Actions] Please update Cisco License On-Prem to version 10-202608 or later (inclusive) |
|||
| [Reference] 1. https://www.twcert.org.tw/tw/cp-169-11283-7536b-1.html |
|||