HEADS UP – Cisco-sa-hardening-ssm-Ph77wdhf – Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026
Summary
As part of Cisco’s ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class – Common Weakness Enumeration (CWE) – and assigned a single Common Vulnerabilities and Exposures identifier (CVE ID) to each CWE grouping.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
Affected Products
Vulnerable Products
These vulnerabilities affect Cisco License On-Prem, regardless of software configuration. Previous releases of this software were called Cisco SSM On-Prem, and they are also affected.
For information about which Cisco software releases are vulnerable, see the Fixed Software section of this advisory.
Products Confirmed Not Vulnerable
Only products listed in the Vulnerable Products section of this advisory are known to be affected by these vulnerabilities.
Cisco has confirmed that these vulnerabilities do not affect Cisco Smart Licensing Utility.
Details
The following table outlines the vulnerability classes that are addressed in these software hardening releases. The CVSS score that is assigned to each CVE ID represents the maximum potential severity of the single most impactful underlying vulnerability within that specific CWE category.
CVE ID Highest CVSS Score Vulnerability Class (Highest-Level CWE) Description
CVE-2026-76480 9.8 CWE-306 Missing authentication for critical function
CVE-2026-76482 10 CWE-347 Improper verification of cryptographic signature
CVE-2026-76483 9.1 CWE-522 Insufficiently protected credentials
CVE-2026-76484 8.8 CWE-94 Improper control of generation of code (code injection)
Workarounds
There are no workarounds that address these vulnerabilities.
Fixed Software
To remediate these vulnerabilities and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.
Fixed Releases
In the following table, the left column lists Cisco License On-Prem software releases. The right column indicates whether a release is affected by the vulnerabilities that are described in this advisory and the first release that includes the fix for these vulnerabilities. Customers are advised to upgrade to an appropriate fixed software release as indicated in this section.
Cisco License On-Prem Release First Fixed Release
9-202601 and earlier1 Migrate to a fixed release.
10-202608 and earlier 10-202609
10-202609 Not vulnerable.
- These releases of Cisco License On-Prem were known as Cisco Smart Software Manager On-Prem. For information about upgrade and migration, see the Cisco License On-Prem Release Notes.
The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.
Exploitation and Public Announcements
The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
Source
These vulnerabilities were found during internal security testing using existing testing processes as well as frontier AI models.
Severity: Critical
Subject: .GLOBAL THREAT – WARNING TO ALL USERS
Source: Cisco
For more details view this alert: https://brica.de/alerts/alert/1756814/
Anderen lazen ook
HEADS UP - Cisco-sa-hardening-ssm-Ph77wdhf - Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026 Summary As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart [...]
Er zijn 12 kwetsbaarheden gevonden in GitLab Community Edition (CE) en Enterprise Edition (EE). Deze kwetsbaarheden treffen versies vanaf 7.0 tot bepaalde 19.x releases. Eén kwetsbaarheid met kenmerk (CVE-2026-110264) heeft een kritieke score van 10,0. Het Nationaal Cyber Security Centrum [...]
Er zijn twee kritieke kwetsbaarheden ontdekt in PHP, een veelgebruikte programmeertaal voor websites en webapplicaties. Misbruik van deze kwetsbaarheden kan ertoe leiden dat aanvallers op afstand systemen overnemen. Uit voorzorg had het NCSC zijn website tijdelijk offline gehaald. Ook meerdere [...]
