CVE-2026-12268

Authenticated PowerShell Injection leads to RCE PUBLISHED

Description (CNA)

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.

Affected (CNA)

Vendor / product	Versions
Zohocorp / DDI Central	affected 0 before 6201

CWE

CWE-20

References

https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.