Cpe:2.3:a:zohocorp:manageengine_ddi_central:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3azohocorpmanageengine_ddi_central/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 14:17:48 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgZohocorp ManageEngine DDI Central: Authorization Bypass and Command Injection (CVE-2026-75869)https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-auth-bypass-cve-2026-75869/Thu, 12 Nov 2026 14:17:48 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-auth-bypass-cve-2026-75869/Zohocorp ManageEngine DDI Central is affected by an authorization bypass and PowerShell command injection vulnerability that allows authenticated non-administrative users to target unauthorized Windows DHCP subnets and potentially execute arbitrary commands via crafted DNS suffix values.<p>Zohocorp ManageEngine DDI Central is affected by an authorization bypass and PowerShell command injection vulnerability. This allows authenticated non-administrative users to target unauthorized Windows DHCP subnets and potentially execute arbitrary commands on managed Windows DHCP servers through crafted DNS suffix values.</p> highadvisoryZohocorp ManageEngine DDI Central: Authorization Bypass (CVE-2026-75868)https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-auth-bypass-cve-2026-75868/Thu, 12 Nov 2026 14:17:38 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-auth-bypass-cve-2026-75868/ManageEngine DDI Central versions below 6301 are affected by an authorization bypass vulnerability allowing authenticated non-administrative users to modify DHCP options on subnets belonging to unauthorized clusters.<p>Zohocorp ManageEngine DDI Central versions below 6301 are affected by an authorization bypass vulnerability. This flaw allows authenticated non-administrative users to modify DHCP options on subnets belonging to unauthorized clusters.</p> highadvisoryZohocorp ManageEngine DDI Central: Improper Authorization Vulnerability (CVE-2026-75864)https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-auth-vuln-cve-2026-75864/Thu, 12 Nov 2026 14:17:21 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-auth-vuln-cve-2026-75864/Zohocorp ManageEngine DDI Central versions below 6301 are affected by an improper authorization vulnerability that allows authenticated non-administrative users to delete DNS zones outside their assigned scope.<p>Zohocorp ManageEngine DDI Central versions below 6301 are affected by an improper authorization vulnerability (CVE-2026-75864). This vulnerability allows authenticated non-administrative users to delete DNS zones outside their assigned scope. This vulnerability has a CVSS v3.1 base score of 8.1.</p> highadvisoryZoho ManageEngine DDI Central: Authentication bypass via synchronization APIs (CVE-2026-19422)https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-auth-bypass-cve-2026-19422/Thu, 12 Nov 2026 14:17:12 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-auth-bypass-cve-2026-19422/An authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs allows unauthenticated users to impersonate onboarded Windows servers and perform unauthorized modifications.Zoho ManageEngine DDI Central versions below 6301 are affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs. This vulnerability allows an unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.

Impact

Successful exploitation allows unauthenticated users to perform unauthorized DNS and DHCP modifications. The vulnerability is rated with a CVSS v3.1 base score of 9.1.

]]>criticaladvisory