CVE-2026-76437: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Cisco Cisco License On-Prem

This vulnerability arises from improper validation of user-supplied content in configurations submitted through the Cisco License On-Prem web interface. An attacker with administrative access can exploit this flaw to execute arbitrary OS commands as root. Because exploitation requires existing admin credentials, the primary impact is the ability to perform actions such as shutting down the system that normal admins cannot do. No known exploits are reported in the wild. The vulnerability affects multiple specific versions of Cisco License On-Prem as listed.

An authenticated attacker with administrative privileges can execute arbitrary commands on the underlying OS with root privileges, potentially causing denial of service by shutting down the system. There is no impact on confidentiality or integrity reported. The vulnerability does not allow privilege escalation beyond existing admin rights but grants additional control over system operations.

No vendor advisory or patch information is provided in the input data. Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted personnel only and monitor for unauthorized configuration changes.