Skip to content
OpenAdvisories
High · 8.8 CVE-2026-12269 EUVD-2026-88209GHSA-6xvw-37x7-c8hw

Authenticated File Write to RCE via keepalived in DDI Central

Published Sep 28, 2026 · Updated Sep 28, 2026 · Assigned by Zohocorp

Description

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.

Affected products

VendorProductAffectedFixed
Zohocorp DDI Central < 6201 6201

References