Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-12269

Authenticated File Write to RCE via keepalived in DDI Central

Description

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zohocorp DDI Central

Default version status: unaffected

  • 0 to < 6201affected

References