← Database

CVE-2026-12572

HIGH CVSS: 7.2 Published: 2026-11-10 Modified: 2026-11-10

Description

Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command execution as the PostgreSQL service account.

Affected Platforms

Unknown

Weakness Type

CWE-89

References