Cisco Releases Critical Patches for SSM On-Prem, NX-OS, and Meraki Vulnerabilities
Cisco has issued software updates addressing multiple critical vulnerabilities across its License On-Prem, NX-OS, and Meraki platforms following internal security reviews.
Key points
- Cisco released patches for critical vulnerabilities in License On-Prem, NX-OS, and Meraki.
- The flaws were discovered internally and are not known to be actively exploited.
- No workarounds exist; users must apply the available software updates.
Cisco has released software updates to address multiple critical vulnerabilities across three major product lines: Cisco License On-Prem (formerly Smart Software Manager On-Prem), Cisco NX-OS, and Cisco Meraki. The company issued separate security advisories for each platform on October 2026, following comprehensive internal security reviews conducted by their respective engineering teams.
At a glance
- Publisher
- Cisco PSIRT
- CVEs
- See advisory
The vulnerabilities affect the web-based management interfaces and API endpoints of these systems. In the case of Cisco License On-Prem, the flaws could allow a remote attacker to gain unauthorized access, retrieve sensitive information, cause a denial of service, or elevate privileges. For the other platforms, Cisco grouped the internally discovered issues by their underlying Common Weakness Enumeration (CWE) class and assigned a single Common Vulnerabilities and Exposures (CVE) identifier to each grouping to streamline the disclosure process.
Internal Discovery and Severity
All vulnerabilities detailed in the October 2026 advisories were identified during internal testing. Cisco stated that there is no evidence that these flaws are being actively exploited in the wild. Despite the lack of known exploitation, the company assigned a "Critical" Security Impact Rating to the issues across all affected products.
For Cisco License On-Prem, the specific CVEs addressed are CVE-2026-20328, CVE-2026-76437, CVE-2026-76452, and CVE-2026-76454. Additionally, a separate hardening release for this product addresses CVE-2026-76480, CVE-2026-76482, CVE-2026-76483, and CVE-2026-76484.
Cisco NX-OS updates address CVE-2026-76453, CVE-2026-76455, CVE-2026-76456, CVE-2026-76457, CVE-2026-76458, and CVE-2026-76459. The Meraki security hardening release covers CVE-2026-76463, CVE-2026-76464, CVE-2026-76467, CVE-2026-76468, CVE-2026-76469, CVE-2026-76470, and CVE-2026-76472.
Affected Products
The advisories cover a broad range of Cisco infrastructure and management tools. Cisco License On-Prem is used for software licensing and management. Cisco NX-OS is the network operating system for Nexus switches. Cisco Meraki products include cloud-managed networking, security, and visibility solutions.
Because the vulnerabilities in License On-Prem affect web-based management interfaces and API endpoints, systems exposed to untrusted networks are at risk of remote exploitation. The other platforms were also found to contain multiple internally discovered vulnerabilities that required immediate remediation.
What should you do?
Cisco has released software updates that address these vulnerabilities for all affected products. The company explicitly stated that there are no workarounds that address these vulnerabilities. Administrators should apply the latest software updates as soon as possible to mitigate the risk.
Users can find detailed information and download links in the respective Cisco Security Advisories. For License On-Prem, the advisories are available at cisco-sa-hardening-ssm-Ph77wdhf and cisco-sa-ssm-access-nttb2dhE. For NX-OS, see cisco-sa-hardening-nxosw1-cWzSbtR. For Meraki, see cisco-sa-hardening-meraki-os-drbEX9GH.
What to do and how to stay safe: Cisco
- Patch scores alone ignore context like network exposure and asset criticality.
- You must map vulnerabilities to specific business risks to prioritize correctly.
- Continuous exposure data replaces static scanning for accurate prioritization.
Prioritize vulnerabilities by actual exploitability and business impact, not by theoretical severity scores. Update your asset context and exposure data continuously to maintain accurate risk rankings.
Step-by-step guide: Risk Based Vulnerability Management: Prioritize Fixes by Actual Threat
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Are these vulnerabilities being actively exploited?
No, Cisco stated that these vulnerabilities were found during internal testing and are not known to be actively exploited.
Are there any workarounds for these issues?
No, Cisco confirmed that there are no workarounds that address these vulnerabilities; users must apply software updates.
Which CVEs are associated with Cisco NX-OS?
The NX-OS update addresses CVE-2026-76453, CVE-2026-76455, CVE-2026-76456, CVE-2026-76457, CVE-2026-76458, and CVE-2026-76459.
