A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could… (CVE-2026-20328)
Description
A critical vulnerability exists in the web-based management interface of Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem). It allows an unauthenticated remote attacker to reset the password of any account, including administrative users, by exploiting improper checks during the password reset process. This could lead to unauthorized access to the application with high privileges.
CVSS v3.1
Score 9.1critical
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-20328 describes a vulnerability in Cisco License On-Prem's web management interface where improper validation during the password reset process enables an unauthenticated remote attacker to send crafted requests that reset passwords of arbitrary accounts, including high-privileged administrative accounts. This flaw could allow the attacker to gain unauthorized access to the application as any user.
Potential Impact
Successful exploitation grants an unauthenticated attacker the ability to reset passwords for any user account, including administrators, resulting in unauthorized access with potentially full control over the affected application. The CVSS score of 9.1 reflects high confidentiality and integrity impact with no availability impact.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict access to the management interface and monitor for suspicious password reset activity.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-v5w6-73vj-7qh9
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-20328"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac6bff42cdf04f65682909f
Added to database: 10/07/2026, 21:56:04 UTC
Last enriched: 10/07/2026, 22:08:42 UTC
Last updated: 10/08/2026, 02:48:07 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.