Zohocorp Ddi Central vulnerabilities

5 CVEs affecting Zohocorp Ddi Central, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-12265, published 2026-09-28.

More from Zohocorp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-12269, published 2026-09-28. High severity, CVSS 8.8. EPSS: 7% chance of exploitation in the next 30 days. Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated…
• CVE-2026-12268, published 2026-09-28. High severity, CVSS 8.8. EPSS: 4.7% chance of exploitation in the next 30 days. ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.
• CVE-2026-12267, published 2026-09-28. High severity, CVSS 7.2. EPSS: 3.6% chance of exploitation in the next 30 days. ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.
• CVE-2026-12264, published 2026-09-28. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.
• CVE-2026-12265, published 2026-09-28. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations.