Cisco patches License On-Prem flaws found internally

Cisco issued October 2026 License On-Prem patches for internally found flaws that could allow remote access, data exposure, denial of service, or privilege escalation.

Cisco published an October 2026 security hardening release for Cisco License On-Prem, formerly Smart Software Manager On-Prem, covering multiple vulnerabilities in the web management interface and API. A remote attacker could gain unauthorized access, read sensitive information, cause a denial of service, or elevate privileges. Cisco said the issues were found in an internal security review, are not known to be actively exploited, and are fixed only by software updates, with no workarounds. The reports disagree on CVE detail: one excerpt names no CVE identifiers and does not confirm exploitation, while the other says identifiers were assigned and issues were grouped by Common Weakness Enumeration class. Neither source lists specific CVE IDs or reports active exploitation.

• On 2026-10-07 Cisco disclosed multiple vulnerabilities in Cisco License On-Prem, formerly Smart Software Manager On-Prem.
• The flaws affect the web management interface and API and could let a remote attacker gain unauthorized access, read sensitive information, cause a denial of service, or elevate privileges.
• Cisco released an October 2026 security hardening update after an internal review and said no workarounds are available.
• Cisco says the issues were found internally and are not known to be actively exploited.
• One advisory excerpt lists no CVE identifiers; the other says CVEs were assigned and issues were grouped by CWE, but neither source names specific CVE IDs.