Back Gbhackers

Cisco Smart Software Manager Flaw Allowed Arbitrary Command Execution

Gbhackers •Divya • April 2, 2026

Cisco has released a high-priority security advisory regarding a critical vulnerability in its Smart Software Manager On-Prem (SSM On-Prem) platform. The flaw, tracked as CVE-2026-20160, carries a near-maximum CVSS severity score of 9.8 out of 10. If exploited, it enables an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Cisco Smart Software Manager Vulnerability Enables Remote Command Execution Cisco has issued a high-priority security advisory for a critical vulnerability in its Smart Software Manager On-Prem (SSM On-Prem) platform, tracked as CVE-2026-20160. This flaw, which has a CVSS score of 9.8, allows unauthenticated remote attackers to execute arbitrary commands with root privileges on affected systems. The vulnerability was published on April 1, 2026, and poses a significant risk to enterprise organizations that utilize this tool for managing Cisco software licenses. Exploitation of this vulnerability could lead to severe impacts on system integrity and confidentiality. Cisco has urged users to take immediate action to mitigate the risks associated with this flaw. The advisory highlights the urgency of addressing this vulnerability to prevent potential attacks. Organizations are advised to monitor for updates and apply patches as they become available. 4 sources 70

Extracted Entities

CVEs (1)

CVE-2026-20160

Platforms (1)

Smart Software Manager On-Prem