As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco… (CVE-2026-76480)

Cisco conducted a comprehensive internal security review of Cisco License On-Prem, resulting in the discovery of multiple vulnerabilities related to insufficient protection against code injection (CWE-94). These vulnerabilities are tracked under CVE-2026-76480 and have a critical CVSS 3.1 score of 9.8 with network attack vector, low attack complexity, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability. The vulnerabilities were addressed by software hardening releases, though no explicit patch or version information is provided.

The vulnerabilities allow for potential code injection attacks that could compromise confidentiality, integrity, and availability of the affected system. Given the CVSS score of 9.8, exploitation could lead to full system compromise without requiring privileges or user interaction.

Cisco has released software hardening updates addressing these vulnerabilities as part of their internal security review. No explicit patch links or version details are provided, so users should consult Cisco's official advisories for the latest updates and remediation guidance.