Description
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| zohocorp | manageengine_ddi_central | < 6201 | 6201 |
Critical · 9.8
CVE-2026-12571
EUVD-2026-56557GHSA-fffc-2x8v-g95f
Authentication Bypass Leading to Account Takeover
Published Aug 11, 2026 · Updated Aug 12, 2026 · Assigned by Zohocorp