Ddi Central (Zohocorp) - vulnerabilities (CVEs)

5 CVEs, 5 in the last 30 days, 1 known versions, newest CVE from 2026-09-28. Vendor: Zohocorp.

CVEs of Ddi Central

• CVE-2026-12265 - CVSS 8.8 (high), 2026-09-28: Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL…
• CVE-2026-12264 - CVSS 8.8 (high), 2026-09-28: Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code…
• CVE-2026-12267 - CVSS 7.2 (high), 2026-09-28: ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code…
• CVE-2026-12268 - CVSS 8.8 (high), 2026-09-28: ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.
• CVE-2026-12269 - CVSS 8.8 (high), 2026-09-28: Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue…