CVE-2026-12571: Zohocorp ManageEngine Ddi Central

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.

Affected products

• Zohocorp ManageEngine Ddi Central: before 6201 (fixed in 6201)

Published 2026-08-11. Last modified 2026-08-31.