CVE-2026-12267

Summary

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.

Affected Software

Weaknesses

• CWE-20: CWE-20 Improper input validation

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html

• ←Previous
• Next→