Back Cybersecuritynews

Cisco Smart Software Manager Vulnerability Let Attackers Execute Arbitrary Commands

Cybersecuritynews •Abinaya • April 2, 2026

Cisco has issued an urgent security warning regarding a critical vulnerability in its Smart Software Manager On-Prem (SSM On-Prem) platform. Enterprise organizations widely use this tool to manage their Cisco software licenses locally. Tracked as CVE-2026-20160, the flaw carries a near-perfect CVSS severity score of 9.8 out of 10. If exploited, it allows an unauthenticated, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Cisco Smart Software Manager Vulnerability Enables Remote Command Execution Cisco has issued a high-priority security advisory for a critical vulnerability in its Smart Software Manager On-Prem (SSM On-Prem) platform, tracked as CVE-2026-20160. This flaw, which has a CVSS score of 9.8, allows unauthenticated remote attackers to execute arbitrary commands with root privileges on affected systems. The vulnerability was published on April 1, 2026, and poses a significant risk to enterprise organizations that utilize this tool for managing Cisco software licenses. Exploitation of this vulnerability could lead to severe impacts on system integrity and confidentiality. Cisco has urged users to take immediate action to mitigate the risks associated with this flaw. The advisory highlights the urgency of addressing this vulnerability to prevent potential attacks. Organizations are advised to monitor for updates and apply patches as they become available. 4 sources 70

Extracted Entities

Cisco Smart Software Manager Vulnerability Let Attackers Execute Arbitrary Commands

The full story

Extracted Entities

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)