CVE-2026-12267
ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS…
- Risk score
- 61/100
- CVSS
- 7.2 v3.1
- Exploit chance (30 days)
- 3.6%
- Published
- 28 Sep 2026
Open in the live forecast Today's forecast
What to know
- What it is
- ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 7.2 high
References
Original description
ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution.
Last activity 28 Sep 2026. Patch Forecast updates every hour.