Veille CVE

Recherche « Zohocorp DDI Central »

6 CVE

Critique 1 Élevée 5 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Zohocorp DDI Central » ✕
  1. CVE-2026-12265 8.8 Élevée

    Zohocorp DDI Central

    Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations.

  2. CVE-2026-12264 8.8 Élevée

    Zohocorp DDI Central

    Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.

  3. CVE-2026-12269 8.8 Élevée

    Zohocorp DDI Central

    Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.

  4. CVE-2026-12268 8.8 Élevée

    Zohocorp DDI Central

    ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.

  5. CVE-2026-12267 7.2 Élevée

    Zohocorp DDI Central

    ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.

  6. CVE-2026-12571 9.8 Critique

    zohocorp manageengine_ddi_central

    An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.