A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could… (CVE-2026-76452)

This vulnerability arises from insufficient validation of user-supplied input in the web-based management interface of Cisco License On-Prem. An authenticated remote attacker with administrative credentials can send crafted requests to perform SQL injection attacks, potentially reading additional internal database information not normally accessible to administrators. The vulnerability does not affect availability or integrity, only confidentiality.

Successful exploitation allows an attacker with valid administrative credentials to access sensitive internal database contents beyond normal administrative privileges, compromising system confidentiality. There is no impact on system integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability requires valid administrative credentials, ensure strong credential management and monitor for suspicious administrative activity until a patch or official fix is available.