Cpe:2.3:a:zoho:manageengine_ddi_central:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3azohomanageengine_ddi_central/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 10 Nov 2026 17:00:10 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgManageEngine DDI Central: Authenticated command injection (CVE-2026-12573)https://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-rce/Tue, 10 Nov 2026 17:00:10 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-manageengine-ddi-central-rce/ManageEngine DDI Central is affected by an authenticated command injection vulnerability (CVE-2026-12573) that allows for arbitrary command execution on managed Cisco routers via the DHCP pool name.<p>A public proof-of-concept exploit is available for CVE-2026-12573. The vulnerability allows an authenticated attacker to inject arbitrary commands into Cisco routers managed by ManageEngine DDI Central by manipulating the DHCP pool name field.</p> highthreat