Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Zohocorp DDI Central 6201 Clear all filters
TI-2026-10547 CVE-2026-12265 · GHSA-9c8c-6fxg-mppr

Missing Authorization on HA Failover Config allows Complete Data Destruction

Priority MEDIUM 42

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0088 Published 2026-09-28 Fixed in 6201 CWE-284
TI-2026-10546 CVE-2026-12264 · GHSA-jf5j-gcwm-85w2

Authenticated File Write via HA Failover Config Upload leads to RCE

Priority MEDIUM 44

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01951 Published 2026-09-28 Fixed in 6201 CWE-434
TI-2026-10549 CVE-2026-12268 · GHSA-hw8r-9jmq-c37g

Authenticated PowerShell Injection leads to RCE

Priority MEDIUM 48

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04726 Published 2026-09-28 Fixed in 6201 CWE-20
TI-2026-10550 CVE-2026-12269 · GHSA-6xvw-37x7-c8hw

Authenticated File Write to RCE via keepalived in DDI Central

Priority MEDIUM 50

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06991 Published 2026-09-28 Fixed in 6201 CWE-269