CVE-2026-76483

CRITICALCVSS 9.1/10EPSS 0.22%

Last modified

CVE-2026-76483 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. EPSS estimates a 0.22% chance of exploitation in the next 30 days.

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76483 are related to issues with insufficiently protected credentials that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522.

Metrics

EPSS Probability
0.22%

11.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
CiscoCisco License On-Prem7-202001; 1.1; 6.3.0; 8-202004; 8-202006; 1.2; 1.3; 8-202012; 8-202010; 8-202008; 9-202201; 8-202102; 1.4; 8-202105; 8-202108; 8-202112; 8-202201; 8-202206; 8-202212; 8-202302; 8-202303; 8-202304; 8-202308; 8-202401; 8-202404; 9-202406; 9-202407; 9-202410; 9-202412; 9-202501; 9-202502; 9-202504; 9-202507; 9-202510; 9-202601; 10-202606; 10-202608

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-76483?
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76483 are related to issues with insufficiently protected credentials that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522.
How severe is CVE-2026-76483?
CVE-2026-76483 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 0.22% probability of exploitation in the next 30 days.
How do I fix CVE-2026-76483?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

Are you affected by CVE-2026-76483?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST