Cisco UCS Central Software has a critical vulnerability in its web-based management interface. This flaw allows authenticated, remote attackers to execute arbitrary code or access sensitive information. The vulnerability stems from inadequate validation of user input within HTTP requests. Attackers can exploit this by sending a specially crafted HTTP request to a vulnerable endpoint. Successful exploitation grants the ability to run arbitrary commands and write files to the filesystem. Additionally, sensitive information can be retrieved by the attacker. Valid user credentials on the affected device are required for exploitation. Cisco has issued software updates to fix this vulnerability. Currently, no workarounds are available to mitigate this issue. This vulnerability has a High Security Impact Rating. It is identified by the CVE number CVE-2026-76506.