Skip to content
OpenAdvisories
High · 8.8 CVE-2026-75869 EUVD-2026-124378GHSA-fw58-9p46-2m4g

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass and PowerShell command injection vulnerability…

Published Nov 12, 2026 · Assigned by Zohocorp

Description

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass and PowerShell command injection vulnerability that allowed authenticated non-administrative users to target unauthorized Windows DHCP subnets and potentially execute arbitrary commands on managed Windows DHCP servers through crafted DNS suffix values.

Affected products

VendorProductAffectedFixed
ManageEngine DDI Central 0 <6301 —

References