CVE-2026-76480

CriticalCVSS 9.8/10Last modified Nov 7, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76480 are related to issues with improper authentication that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-306.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Cisco	Cisco License On-Prem	7-202001; 1.1; 6.3.0; 8-202004; 8-202006; 1.2; 1.3; 8-202012; 8-202010; 8-202008; 9-202201; 8-202102; 1.4; 8-202105; 8-202108; 8-202112; 8-202201; 8-202206; 8-202212; 8-202302

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ssm-Ph77wdhf

Timeline

Published: Oct 7, 2026
Last modified: Nov 7, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-764817.5As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim CVE-2026-7648210.0As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Ci CVE-2026-764839.1As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Ci CVE-2026-764848.8As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Ci CVE-2026-764859.8A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow a CVE-2026-764869.8A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow a CVE-2026-764875.3A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Un CVE-2026-764886.5A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticat CVE-2026-764895.8Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticat CVE-2026-76497.5The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to time-CVE-2026-764908.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c CVE-2026-764917.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c