Cisco License On-Prem: Improper control of code generation (code injection)
Summary
Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), contains a code injection flaw (CWE-94) that was fixed in a security hardening release. According to the CNA CVSS score of 8.8, an attacker with a low-privilege account who can reach the service over the network may be able to inject code and fully compromise confidentiality, integrity and availability. Cisco reports that the issue was found during internal testing and is not known to be actively exploited.
Affected
- Cisco License On-Prem 10-202608 and earlier
- Cisco License On-Prem 9-202601 and earlier (formerly SSM On-Prem)
- Previous SSM On-Prem releases are also affected, regardless of software configuration
Fixed in
- Cisco License On-Prem 10-202609 (first fixed release, listed as not vulnerable by Cisco)
- Releases 9-202601 and earlier are not fixed in place; Cisco recommends migrating to a fixed release
Workaround
- No workarounds available according to Cisco.
Exploitation
- Cisco PSIRT is not aware of any public announcements or malicious use.
- No public proof of concept found; exploit details are not publicly known.
- No CISA KEV listing found for this CVE at the time of research.
- CISA SSVC: exploitation none, not automatable, total technical impact.
Our recommendation
- Identify all License On-Prem and SSM On-Prem instances and their versions.
- Upgrade 10-202608 and earlier to 10-202609, following the upgrade path in the Cisco release notes.
- Plan migration for 9-202601 and earlier, since these releases do not receive the fix.
- Until patched, restrict access to the management interface to a trusted admin network and monitor for unusual logins.
- Re-check the Cisco advisory and NVD, as NVD analysis was still pending at the time of research.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Cisco Security Advisory cisco-sa-hardening-ssm-Ph77wdhf sec.cloudapps.cisco.com
- Cisco License On-Prem 10-202609 Release Notes www.cisco.com
- Cisco Security Advisory cisco-sa-ssm-access-nttb2dhE (sibling advisory) www.cisco.com
- VulnCheck/Vulnrichment record CVE-2026-76484 vulners.com
- OpenCVE CVE-2026-76484 app.opencve.io
- BDU FSTEC BDU:2026-16100 vulners.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 21:16.
Original description (NVD)
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76484 are related to issues with insufficient protection against code injection that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-94.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.