Vulnerabilidades do Zohocorp DDI Central
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Zohocorp DDI Central: 5 registro(s), com versões afetadas e correções.
CVE-2026-12265
Alta · 8.8
CWE-284 28/09/2026
Missing Authorization on HA Failover Config allows Complete Data Destruction
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations.
CVE-2026-12264
Alta · 8.8
CWE-434 28/09/2026
Authenticated File Write via HA Failover Config Upload leads to RCE
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.
CVE-2026-12269
Alta · 8.8
CWE-269 28/09/2026
Authenticated File Write to RCE via keepalived in DDI Central
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.
CVE-2026-12268
Alta · 8.8
CWE-20 28/09/2026
Authenticated PowerShell Injection leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.
CVE-2026-12267
Alta · 7.2
CWE-20 28/09/2026
Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.