CVE-2026-20160 – Cisco Smart Software Manager On-Prem

Cisco has released a security patch for Smart Software Manager On-Prem addressing CVE-2026-20160, a critical vulnerability affecting license management systems. The CVSS score is 9.8, which is Critical severity. This level of severity indicates a near-certain path to complete system compromise if exploited.

There is no confirmed active exploitation at this time, but the risk remains extremely high due to the system’s central role in managing software entitlements across enterprise environments. A successful attack could allow unauthorized access, manipulation of licensing controls, or broader system compromise.