Cisco License On-Prem: Improper verification of cryptographic signature
Summary
Cisco License On-Prem, formerly Smart Software Manager On-Prem, does not properly verify a cryptographic signature (CWE-347). Cisco has not published details of the affected checks, and the CVSS score reflects the most severe issue in the grouped CVE. Per the CVSS vector, an unauthenticated attacker on the network could potentially bypass signature verification with high impact on confidentiality, integrity and availability, but the practical impact is not confirmed.
Affected
- Cisco License On-Prem 10-202608 and earlier
- Cisco SSM On-Prem 9-202601 and earlier
- Affected regardless of software configuration
Fixed in
- 10-202609 is the first fixed release in the 10 train (based on secondary sources; verify against the Cisco advisory table)
- 9-202601 and earlier: no fixed release listed; Cisco advises migrating to a fixed release
Workaround
- None. Cisco states that no workarounds are available.
Exploitation
- Cisco PSIRT is not aware of any public announcements or malicious use.
- CISA SSVC: exploitation none, automatable yes, technical impact total.
- No CISA KEV listing found; EPSS is very low (0.00201).
Our recommendation
- Identify all License On-Prem and legacy SSM On-Prem instances, including those run by partners.
- Upgrade 10-202608 and earlier to 10-202609 after reviewing the release notes and confirming the fixed release in the Cisco advisory.
- Plan migration for 9-202601 and earlier.
- Restrict access to the management interface to trusted networks and check for unexpected exposure.
- Review the other License On-Prem CVEs published the same day in the same change window.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Cisco Security Advisory cisco-sa-hardening-ssm-Ph77wdhf sec.cloudapps.cisco.com
- Cisco License On-Prem 10-202609 Release Notes www.cisco.com
- Secure-ISS: Cisco License On-Prem critical vulnerabilities www.secure-iss.com
- VulDB entry 415104 vuldb.com
- Rapid7 via Vulners: CVE-2026-76482 vulners.com
- OpenCVE: CVE-2026-76482 app.opencve.io
- NS3 Techsolutions: CERT-In Cisco security alert October 2026 www.ns3techsolutions.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 14:33.
Original description (NVD)
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76482 are related to issues with improper input verification that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-347.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.