CVE-2026-12269 — Authenticated File Write to RCE via keepalived in DDI Central

CVE-2026-12269

Authenticated File Write to RCE via keepalived in DDI Central PUBLISHED

Description (CNA)

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.

Affected (CNA)

Vendor / product	Versions
Zohocorp / DDI Central	affected 0 before 6201

CWE

CWE-434, CWE-269

References

https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2026-12269.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.