CVE-2026-20328

Name of the Vulnerable Software and Affected Versions Cisco License On-Prem (affected versions not specified)

Description An issue in the web-based management interface of Cisco License On-Prem, previously known as Cisco Smart Software Manager On-Prem, allows an unauthenticated remote attacker to gain unauthorized access to the application. This occurs due to improper checks during the password reset process. An attacker can exploit this by sending a malicious request to the web-based management interface to reset the password of any account, including high-privileged administrative accounts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.