As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0407 Vulnerabilities Fixed in Cisco License On-Prem
Cisco released patches for multiple vulnerabilities in Cisco License On-Prem affecting the web management interface and application programming interface (API) endpoints. Unauthenticated attackers can reset passwords, write files, or trigger denial of service (DoS) conditions, while authenticated administrators can execute arbitrary commands with root privileges or access database content via structured query language (SQL) injection. The flaws span authentication, cryptographic verification, credential protection, and code injection.
Why it matters: Organizations running Cisco License On-Prem must apply these patches immediately; unauthenticated remote attackers can already compromise the system, and the web interface and API should never be internet-facing or left uncontrolled on internal networks.
- Source published
- First seen by Cybersecurity Tracker