CVE-2026-95646

{
  "etk_id": "ETK-2026-4081",
  "cve_id": "CVE-2026-95646",
  "display_id": "CVE-2026-95646",
  "ghsa_id": "GHSA-xwj8-4q5p-8r7j",
  "euvd_id": "EUVD-2026-120875",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Command injection in DDI Central Cisco IOS DHCP configuration",
  "summary": "DDI Central versions 6500 and earlier are affected in the Cisco IOS DHCP configuration workflow. A cluster-scoped operator may cause unintended commands to run by submitting crafted Unicode input through that workflow.",
  "mitigation": "Restrict cluster-scoped operator access and disable or limit use of the Cisco IOS DHCP configuration workflow where feasible. Obtain and apply the vendor's security update after confirming the fixed release for your deployment.",
  "vendor": "Zohocorp",
  "product": "DDI Central",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 6500"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "6500"
      ],
      "package_name": "DDI Central",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 87.25389266666667,
  "t0_at": "2026-11-10T10:51:21.107000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-10T19:32:32.584013+00:00",
      "days": 0.36193839135416667,
      "is_lower_bound": false,
      "measured_at": "2026-11-10T10:51:21.107000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-10T10:51:21.107000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-10T10:51:21.107000+00:00",
      "url": "https://github.com/advisories/GHSA-xwj8-4q5p-8r7j"
    }
  }
}