Critical severity · published Oct 7, 2026
CVE-2026-20328
Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability
9.1
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during the password reset process. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to reset the password of an arbitrary account, including high-privileged administrative user accounts, possibly allowing the attacker to gain unauthorized access to the application as any user.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Cisco License On-Prem · Cisco
7-202001; 1.1; 6.3.0; 8-202004; 8-202006; 1.2; +30 more · source: vendor
Affected product
CL
Cisco License On-Prem
Cisco
More from Cisco License On-Prem
10.0
CVE-2026-76482
Cisco License On-Prem Security Hardening Release
9.8
CVE-2026-76480
Cisco License On-Prem Security Hardening Release
9.1
CVE-2026-76483
Cisco License On-Prem Security Hardening Release
9.1
CVE-2026-76454
Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability
8.8
CVE-2026-76484
Cisco License On-Prem Security Hardening Release