cbcvebase.
CVE-2026-12267
published 2026-09-28

CVE-2026-12267: ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code…

PriorityP357high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
3.60%
89.1th percentile
ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.

Affected

1 ranges
VendorProductVersion rangeFixed in
zohocorpddi_central< 62016201
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.