CVE-2026-12267

Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE PUBLISHED

Description (CNA)

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.

Affected (CNA)

Vendor / product	Versions
Zohocorp / DDI Central	affected 0 before 6201

CWE

CWE-20

References

https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.