Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-12265

Missing Authorization on HA Failover Config allows Complete Data Destruction

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zohocorp

Description

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zohocorp DDI Central

Default version status: unaffected

  • 0 to < 6201affected

References