HIGH 8.8 NVD

CVE-2026-12264

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code executio

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.

References

https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html

Published: 2026-09-28 · Source: NVD · Feed updated: 2026-09-28

This high severity vulnerability with a CVSS score of 8.8 was published on 2026-09-28 via NVD.

vulnfeed aggregates 13625 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.