HIGH 7.2 NVD

CVE-2026-12267

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execut

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.

References

https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html

Published: 2026-09-28 · Source: NVD · Feed updated: 2026-09-28

This high severity vulnerability with a CVSS score of 7.2 was published on 2026-09-28 via NVD.

vulnfeed aggregates 13625 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.