[ CVE-2026-12269 · Published 28 Sep 2026 ]
Vulnerability in Zohocorp DDI Central
CVSS 8.8
EPSS 7%No fix listed yet
[ Description ]Official description
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.