---
id: "CVE-2026-12573"
page: "https://infrastack.ai/live/CVE-2026-12573"
kind: "vulnerability"
aliases: ["CVE-2026-12573"]
title: "ManageEngine DDI Central: DHCP pool name injects commands into managed Cisco routers"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["cisco-ios", "ddi-central", "dhcp", "manageengine", "vendor"]
not_affected_if: ["not-cisco-managed"]
published_at: "2026-11-10T12:17:19+00:00"
first_seen_at: "2026-11-10T12:21:54+00:00"
updated_at: "2026-11-10T12:22:28+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12573", "first_seen_at": "2026-11-10T12:21:54+00:00"}]
exploit_sources: []
---

# ManageEngine DDI Central: DHCP pool name injects commands into managed Cisco routers

Link for people: https://infrastack.ai/live/CVE-2026-12573 (this .md is for agents)

ManageEngine DDI Central versions 6200 and below pass a DHCP pool name into Cisco IOS configuration without sanitising it. An attacker who can set that name can run arbitrary commands on the Cisco routers the product manages.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed DDI Central version against the affected range (6200 and below).

## Fix

- Move to a DDI Central release newer than `6200`; the sources do not name the fixed version.

## Timeline

- 2026-11-10T12:21:54+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-12573

## From the sources

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injection via DHCP pool name leading to arbitrary commands on managed Cisco routers.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_