CVE-2026-12266highCWE-862

CVE-2026-12266: falha de alta gravidade em Zohocorp DDI Central

Authenticated Broken Access Control

Publicada em

Seguir esta CVE+ Monitorar DDI Central

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

18Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.6
Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to LDAP bind password exposure through insufficiently protected LDAP settings API.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Produtos afetados
Zohocorp · DDI Central
CVEs relacionadas — Zohocorp DDI Central

No mesmo produto, das mais perigosas para as menos.

CVE-2026-12269HIGHAuthenticated File Write to RCE via keepalived in DDI CentralEPSS 7.0%CVE-2026-12268HIGHAuthenticated PowerShell Injection leads to RCEEPSS 4.7%CVE-2026-12267HIGHAuthenticated PowerShell Injection in DNS Query Resolution Policy leads to RCEEPSS 3.6%CVE-2026-12264HIGHAuthenticated Arbitrary File WriteEPSS 2.0%CVE-2026-12265HIGHAuthenticated Broken Access ControlEPSS 0.9%CVE-2026-12574HIGHServer-Side HTML InjectionEPSS —