CVE-2026-12265

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations.

Score

CVSS 3.1 8.8 High

Status

Awaiting Analysis - 0fc0942c-577d-436f-ae8e-945763c79b02

Published

2026-09-28

Last modified

2026-09-28

Weaknesses

CWE-284

Affected products

• Ddi Central (Zohocorp)

References

• https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html