P5Verified

CVE-2026-76452: Cisco License On-Prem 7-202001, 1.1, 6.3.0, 8-202004, 8-202006, 1.2, 1.3, 8-202012, 8-202010, 8-202008, 9-202201…

CVE-2026-76452. CVSS 3.1 base score 4.9 (MEDIUM, Vendor/CNA).

Affected technology

Cisco License On-Prem · 7-202001, 1.1, 6.3.0, 8-202004, 8-202006, 1.2, 1.3, 8-202012, 8-202010, 8-202008, 9-202201, 8-202102, 1.4, 8-202105, 8-202108, 8-202112, 8-202201, 8-202206, 8-202212, 8-202302, 8-202303, 8-202304, 8-202308, 8-202401, 8-202404, 9-202406, 9-202407, 9-202410, 9-202412, 9-202501, 9-202502, 9-202504, 9-202507, 9-202510, 9-202601, 10-202606
Cisco

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

What an attacker can do

An authenticated, remote attacker could conduct SQL injection attacks against an affected application. Vendor/CNA’s CVSS 3.1 assessment (base score 4.9/10) rates confidentiality impact as high; integrity and availability impact as none.

Published 2026-10-07 18:01:53.594992+00:00

CWE: CWE-89
CCR priority: 19.6 /100 (P5)
CVSS 3.1: 4.9 /10 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · Vendor/CNA
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-07 19:02:04.772962+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-76452.html