← Database

CVE-2026-19422

CRITICAL CVSS: 9.1 Published: 2026-11-12 Modified: 2026-11-12

Description

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.

Affected Platforms

Unknown

Weakness Type

CWE-306

References