Digital.Nhs.Uk Cisco Patches Critical Vulnerabilities in License On-Prem Software
Article Content
- •Cisco patched critical vulnerabilities in License On-Prem software with CVSS scores up to 10.0.
- •The most severe flaw allows for improper verification of cryptographic signatures.
- •Administrators must consult two advisories for specific patch requirements.
Cisco has released security updates for critical vulnerabilities in its License On-Prem software, including CVE-2026-76482, which has a CVSS score of 10.0 due to improper verification of cryptographic signatures. The vulnerabilities affect Cisco License On-Prem, previously known as Smart Software Manager On-Prem, and could allow attackers to bypass authentication, access sensitive information, or execute commands. The updates were published on October 7, 2026, and administrators are advised to check two advisories for the specific fixes required based on their installed versions. No known exploitation has been reported for these vulnerabilities, but the severity of some issues necessitates immediate attention. Cisco has credited researchers for reporting several of the vulnerabilities, and the company emphasizes the importance of applying the patches promptly.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Cisco and CVE-2026-0288 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What are the CVEs associated with these vulnerabilities?
How urgent is the need to patch?
Are there known exploits for these vulnerabilities?
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include… 
Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…