CVE-2026-76452

Name of the Vulnerable Software and Affected Versions Cisco License On-Prem (affected versions not specified)

Description An authenticated remote attacker can perform SQL injection attacks against the web-based management interface of Cisco License On-Prem, formerly known as Cisco Smart Software Manager On-Prem. This issue stems from insufficient validation of user-supplied input. By sending a crafted request to the management interface, an attacker with valid administrative credentials can read internal database contents that are typically restricted, compromising system confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.