Signals
Back to database
Schedule49High8.8VulnerabilityCVE-2026-76484No patch link observed

CVE-2026-76484 — As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Sma…

Published Oct 7, 2026, 05:17 PM UTCIngested 1d agoSource NVD(cve-db)CVE-2026-76484

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76484 are related to issues with insufficient protection against code injection that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-94.

CVSS v3.1 base metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.8

High severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Network

Attack Vector

AC

Low

Attack Complexity

PR

Low

Privileges Required

UI

None

User Interaction

S

Unchanged

Scope

C

High

Confidentiality

I

High

Integrity

A

High

Availability

References

Related threats

same CWE or vendor
Medium

CVE-2026-11888 — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosure attack.

CVE-2026-11888 · 3h ago

High

PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

CVE-2026-61433 · 4h ago

Critical

CVE-2026-107700 — dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted path…

CVE-2026-107700 · 5h ago

High

PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

CVE-2026-61446 · 7h ago

Critical

PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets

CVE-2026-61447 · 7h ago

Medium

CVE-2026-105404 — ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not …

CVE-2026-105404 · 9h ago