[CVE-2026-12265] Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control…

Descripción técnica

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations.

Puntuación CVSS

Score: 8.8/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-284

Fuente oficial

Publicado en NIST NVD.