CVE-2026-194229.1Critical

CVE-2026-19422: Authentication Bypass

Zohocorp · DDI Central

Vendor fix available · Affected: Zohocorp DDI Central · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

No EPSS score yet. The score appears once FIRST publishes it.

9.1CriticalCVSS

LowMediumHighCrit.

DescriptionNVD

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 13 Nov.

13 Nov 03:35
Zoho fixes eight ManageEngine flaws, including CVE-2026-12591
SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.