A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of user-supplied content within configurations that are submitted to the web-based management interface. An attacker could exploit this vulnerability by updating configurations within the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. To exploit this vulnerability, the attacker must have valid administrative credentials. Because only an attacker who already holds system administrator privileges can exploit the vulnerability, the only additional privileges gained include the ability to turn off the system, which an administrative user could not normally do.
CVE-2026-76437
Score 4.9 from GitHub Security Advisory published 2026-10-07. A secondary CVSS source baseline 4.9; sources differ by 0.0.
- Lower severity and no public exploit yet
No fix is confirmed yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for the fix.
- CVSS v3
- 4.9
- EG Score
- 4.9MEDIUMhigh confidence
- EG Risk
- 22EG Risk 22/100CISA SSVC
EG Risk is EchelonGraph's 0–100 priority score: it fuses intrinsic severity with real-world exploitation and automatability so you can rank equal-severity CVEs and fix the most dangerous first. Higher = act sooner. Distinct from the 0–10 EG Score (severity).
How it’s computedSeverity49% × 45%Exploitation1% × 40%Automatability0% × 15%CISA SSVC: Track at every mission impact level.Action: No fix is confirmed yet. Restrict network exposure of the affected system or apply the vendor's mitigation within your standard update timelines, and watch the vendor's advisory for the fix. - EPSS PROB
- 0.5%
- EPSS %ILE
- 42nd
- KEV
- Not listed
CISA SSVCTrack at every mission impact level.
No fix is confirmed yet. Restrict network exposure of the affected system or apply the vendor's mitigation within your standard update timelines, and watch the vendor's advisory for the fix.
Exploitation none (CISA Vulnrichment) · Automatable no (CISA Vulnrichment) · Technical impact partial (CISA Vulnrichment). Mission impact is CISA's Mission & Well-being decision point, and only you can judge it: high means the affected system is essential to your organisation's mission, or its compromise could cause irreversible harm to people. CISA's decision table
Published
October 7, 2026
Last Modified
October 8, 2026
Advisory Details (1)
Auto-updated Oct 7, 2026Cisco License (Smart Software Manager) On-Prem Vulnerabilities
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssm-access-nttb2dhEVendor Advisories for CVE-2026-76437(2)
These vendors published their own advisory mentioning this CVE — often with vendor-specific remediation steps + affected product lists not in NVD.
Weakness Classification(1)
MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
Data Freshness Timeline
(refreshed 15× in last 7d / 15× in last 30d)
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
- 2026-10-10 20:00 UTCEPSS rescore
- 2026-10-10 19:56 UTCGHSA enrichment
- 2026-10-09 20:09 UTCEG score recompute
- 2026-10-09 20:09 UTCGHSA enrichment
- 2026-10-09 20:07 UTCEPSS rescore
- 2026-10-08 20:21 UTCGHSA enrichment
- 2026-10-08 19:34 UTCEG score recompute
- 2026-10-08 19:34 UTCGHSA enrichment
- 2026-10-08 17:13 UTCEPSS rescore
- 2026-10-07 19:20 UTCEG score recompute
- 2026-10-07 19:20 UTCGHSA enrichment
- 2026-10-07 18:28 UTCEG score recompute
- 2026-10-07 17:37 UTCEG score recompute
- 2026-10-07 16:36 UTCEG score recompute
- 2026-10-07 16:31 UTCMITRE cvelistV5first tracked
Related CVEs(same CWE)
Frequently asked(5)
What is CVE-2026-76437?
When was CVE-2026-76437 disclosed?
Is CVE-2026-76437 actively exploited?
What is the CVSS score of CVE-2026-76437?
How do I remediate CVE-2026-76437?
Dependency Blast Radius
Explore the affected products and dependency analysis for CVE-2026-76437
Is Your Infrastructure Affected by CVE-2026-76437?
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.