CVE-2026-76482

CriticalCVSS 10.0/10Last modified Nov 7, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76482 are related to issues with improper input verification that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-347.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-347

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
CiscoCisco License On-Prem7-202001; 1.1; 6.3.0; 8-202004; 8-202006; 1.2; 1.3; 8-202012; 8-202010; 8-202008; 9-202201; 8-202102; 1.4; 8-202105; 8-202108; 8-202112; 8-202201; 8-202206; 8-202212; 8-202302

References

Timeline

Published
Oct 7, 2026
Last modified
Nov 7, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-764839.1As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly CiCVE-2026-764848.8As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly CiCVE-2026-764859.8A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow aCVE-2026-764869.8A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow aCVE-2026-764875.3A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (UnCVE-2026-764886.5A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticatCVE-2026-764895.8Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticatCVE-2026-76497.5The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to time-CVE-2026-764908.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764917.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764927.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764937.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has c