A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem),… (CVE-2026-76454)

CVE-2026-76454 describes a vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem. The flaw stems from improper input validation and missing authentication controls in the management API, enabling an unauthenticated remote attacker to send crafted requests that can write arbitrary files to the system or trigger a denial-of-service condition on the affected application.

Successful exploitation could allow an attacker to modify system files, potentially leading to system compromise or disruption. Additionally, the attacker could cause a denial-of-service condition, impacting availability of the affected application. There is no indication of confidentiality impact. The CVSS v3.1 base score is 9.1 (critical), reflecting high impact on integrity and availability with no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the management API to trusted networks and monitor for suspicious activity targeting this API.