Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-12268

Authenticated PowerShell Injection leads to RCE

Description

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zohocorp DDI Central

Default version status: unaffected

  • 0 to < 6201affected

References