CVE-2026-12264

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.

Score

CVSS 3.1 8.8 High

Status

Awaiting Analysis - 0fc0942c-577d-436f-ae8e-945763c79b02

Published

2026-09-28

Last modified

2026-09-28

Weaknesses

CWE-434

Affected products

• Ddi Central (Zohocorp)

References

• https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html