{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3azohocorpmanageengine_ddi_central/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zohocorp:manageengine_ddi_central:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-75869"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ManageEngine DDI Central"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Zohocorp"],"content_html":"\u003cp\u003eZohocorp ManageEngine DDI Central is affected by an authorization bypass and PowerShell command injection vulnerability. This allows authenticated non-administrative users to target unauthorized Windows DHCP subnets and potentially execute arbitrary commands on managed Windows DHCP servers through crafted DNS suffix values.\u003c/p\u003e\n","date_modified":"2026-11-12T14:17:48Z","date_published":"2026-11-12T14:17:48Z","id":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-auth-bypass-cve-2026-75869/","summary":"Zohocorp ManageEngine DDI Central is affected by an authorization bypass and PowerShell command injection vulnerability that allows authenticated non-administrative users to target unauthorized Windows DHCP subnets and potentially execute arbitrary commands via crafted DNS suffix values.","title":"Zohocorp ManageEngine DDI Central: Authorization Bypass and Command Injection (CVE-2026-75869)","url":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-auth-bypass-cve-2026-75869/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zohocorp:manageengine_ddi_central:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-75868"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ManageEngine DDI Central"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Zohocorp"],"content_html":"\u003cp\u003eZohocorp ManageEngine DDI Central versions below 6301 are affected by an authorization bypass vulnerability. This flaw allows authenticated non-administrative users to modify DHCP options on subnets belonging to unauthorized clusters.\u003c/p\u003e\n","date_modified":"2026-11-12T14:17:38Z","date_published":"2026-11-12T14:17:38Z","id":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-auth-bypass-cve-2026-75868/","summary":"ManageEngine DDI Central versions below 6301 are affected by an authorization bypass vulnerability allowing authenticated non-administrative users to modify DHCP options on subnets belonging to unauthorized clusters.","title":"Zohocorp ManageEngine DDI Central: Authorization Bypass (CVE-2026-75868)","url":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-auth-bypass-cve-2026-75868/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zohocorp:manageengine_ddi_central:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-75864"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ManageEngine DDI Central"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Zohocorp"],"content_html":"\u003cp\u003eZohocorp ManageEngine DDI Central versions below 6301 are affected by an improper authorization vulnerability (CVE-2026-75864). This vulnerability allows authenticated non-administrative users to delete DNS zones outside their assigned scope. This vulnerability has a CVSS v3.1 base score of 8.1.\u003c/p\u003e\n","date_modified":"2026-11-12T14:17:21Z","date_published":"2026-11-12T14:17:21Z","id":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-auth-vuln-cve-2026-75864/","summary":"Zohocorp ManageEngine DDI Central versions below 6301 are affected by an improper authorization vulnerability that allows authenticated non-administrative users to delete DNS zones outside their assigned scope.","title":"Zohocorp ManageEngine DDI Central: Improper Authorization Vulnerability (CVE-2026-75864)","url":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-auth-vuln-cve-2026-75864/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zohocorp:manageengine_ddi_central:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-19422"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ManageEngine DDI Central"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Zohocorp"],"content_html":"\u003cp\u003eZoho ManageEngine DDI Central versions below 6301 are affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs. This vulnerability allows an unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated users to perform unauthorized DNS and DHCP modifications. The vulnerability is rated with a CVSS v3.1 base score of 9.1.\u003c/p\u003e\n","date_modified":"2026-11-12T14:17:12Z","date_published":"2026-11-12T14:17:12Z","id":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-auth-bypass-cve-2026-19422/","summary":"An authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs allows unauthenticated users to impersonate onboarded Windows servers and perform unauthorized modifications.","title":"Zoho ManageEngine DDI Central: Authentication bypass via synchronization APIs (CVE-2026-19422)","url":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-auth-bypass-cve-2026-19422/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:zohocorp:manageengine_ddi_central:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}