CVE-2026-12264

Authenticated File Write via HA Failover Config Upload leads to RCE PUBLISHED

Description (CNA)

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.

Affected (CNA)

Vendor / product	Versions
Zohocorp / DDI Central	affected 0 before 6201

CWE

No CWE identifiers supplied.

References

https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.