{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3azohomanageengine_ddi_central/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zoho:manageengine_ddi_central:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-12573"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ManageEngine DDI Central"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"threat","_cs_vendors":["Zoho Corporation"],"content_html":"\u003cp\u003eA public proof-of-concept exploit is available for CVE-2026-12573. The vulnerability allows an authenticated attacker to inject arbitrary commands into Cisco routers managed by ManageEngine DDI Central by manipulating the DHCP pool name field.\u003c/p\u003e\n","date_modified":"2026-11-10T17:00:10Z","date_published":"2026-11-10T17:00:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-rce/","summary":"ManageEngine DDI Central is affected by an authenticated command injection vulnerability (CVE-2026-12573) that allows for arbitrary command execution on managed Cisco routers via the DHCP pool name.","title":"ManageEngine DDI Central: Authenticated command injection (CVE-2026-12573)","url":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:zoho:manageengine_ddi_central:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}