【Vulnerability Alert】Cisco License (Smart Software Manager) On-Prem Has Four Critical Security Vulnerabilities
publish date :
2026-10-22
update date :
2026-10-22
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026101603101414 | Publication Time | 2026-10-16 15:57:17 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-10-16 15:57:17 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】Cisco License (Smart Software Manager) On-Prem Has Four Critical Security Vulnerabilities |
|||
| [Content] Forwarded from TWCERTCC-200-202610-00000025 The Cisco License (Smart Software Manager) On-Prem development team discovered multiple security vulnerabilities during an internal security review and has completed the necessary patches. Currently, there is no evidence indicating that these vulnerabilities are being actively exploited. To help customers deploy security updates in a timely manner and simplify the vulnerability disclosure process, Cisco has publicly released the relevant vulnerability information and recommended remediation measures. CVE-2026-76480, CVSS: 9.8, Missing Authentication for Critical Functionality. CVE-2026-76482, CVSS: 10.0, Improper Verification of Cryptographic Signature. CVE-2026-76483, CVSS: 9.1, Insufficient Protection of Credentials. CVE-2026-76484, CVSS: 8.8, Code Injection Attack. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] Cisco License On-Prem version 9-202601 and earlier (inclusive), Cisco License On-Prem version 10-202608 and earlier (inclusive) |
|||
| [Recommended Actions] Please update to Cisco License On-Prem version 10-202609 or later (inclusive) |
|||
|
[Reference] |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center