Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Advisory TWCERTCC-200-202610-00000025

[Description]
The Cisco License (Smart Software Manager) On-Prem development team discovered multiple security vulnerabilities during an internal security review and has completed remediation. Currently, no evidence has been found indicating that these vulnerabilities have been actively exploited. To help customers deploy security updates in a timely manner and simplify the vulnerability disclosure process, Cisco has publicly disclosed the relevant vulnerability information and remediation recommendations. CVE-2026-76480, CVSS: 9.8, is a missing authentication vulnerability in a critical function.
CVE-2026-76482, CVSS: 10.0, involves improper cryptographic signature verification.
CVE-2026-76483, CVSS: 9.1, involves insufficient certificate protection.
CVE-2026-76484, CVSS: 8.8, is a code injection vulnerability.

[Affected Platforms]
Cisco License On-Prem versions 9-202601 and earlier, Cisco License On-Prem versions 10-202608 and earlier

[Recommendations]
Please update to Cisco License On-Prem 10-202609 or later versions

[References]
1. https://www.twcert.org.tw/tw/cp-169-11289-a6495-1.html