Manageengine Ddi Central (Zohocorp) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-08-11. Vendor: Zohocorp.

CVEs of Manageengine Ddi Central

• CVE-2026-12571 - CVSS 9.8 (critical), 2026-08-11: An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.
• CVE-2024-5471 - CVSS 9.8 (critical), 2024-07-17: Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys.
• CVE-2024-27311 - CVSS 8.8 (high), 2024-07-17: Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to…