CVE-2026-76482
Last modified
CVE-2026-76482 is a critical-severity vulnerability rated 10/10 on the CVSS scale. As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76482 are related to issues with improper input verification that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-347.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76482 are related to issues with improper input verification that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-347.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco License On-Prem | 7-202001; 1.1; 6.3.0; 8-202004; 8-202006; 1.2; 1.3; 8-202012; 8-202010; 8-202008; 9-202201; 8-202102; 1.4; 8-202105; 8-202108; 8-202112; 8-202201; 8-202206; 8-202212; 8-202302; 8-202303; 8-202304; 8-202308; 8-202401; 8-202404; 9-202406; 9-202407; 9-202410; 9-202412; 9-202501; 9-202502; 9-202504; 9-202507; 9-202510; 9-202601; 10-202606; 10-202608 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-76482?
How severe is CVE-2026-76482?
How do I fix CVE-2026-76482?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-7647The Profile Builder Pro plugin for WordPress is vulnerable t…8.1
- CVE-2026-76470As part of Cisco's ongoing commitment to proactive security …8.8
- CVE-2026-76471A vulnerability in the NX-API feature of Cisco NX-OS Softwar…9.8
- CVE-2026-76472As part of Cisco's ongoing commitment to proactive security …8.8
- CVE-2026-7648The LearnPress – WordPress LMS Plugin for Create and Sell On…4.3
- CVE-2026-76480As part of Cisco's ongoing commitment to proactive security …9.8
- CVE-2026-76483As part of Cisco's ongoing commitment to proactive security …9.1
- CVE-2026-76484As part of Cisco's ongoing commitment to proactive security …8.8
- CVE-2026-76485A vulnerability in the VXLAN Operation, Administration, and …9.8
- CVE-2026-76486A vulnerability in the VXLAN Operation, Administration, and …9.8
- CVE-2026-76488A vulnerability in the export policies functionality of Cisc…6.5
- CVE-2026-7649The ARMember – Membership Plugin, Content Restriction, Membe…7.5
Are you affected by CVE-2026-76482?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST