Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent…
Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Zohocorp
- Product
- DDI Central
- CVSS v3.1
- 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Weakness
- CWE-306
- Exposure class
- Identity
- NVD status
- Received
Why it ranks 45 (High)
- CVSS v3.1 9.1 critical
- Exposed product class: identity
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-19422 on this site · NVD · CVE.org · Vulnpedia