CRITICALCVSS v3.1 9.1Vulnerability
CVE-2026-19422
Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.
Properties
- Epss score
- 0.02193
- Cvss score
- 9.1
- First seen
- 2026-11-12T12:16:50+00:00
- Last seen
- 2026-11-12T12:16:50+00:00
- Euvd assigner
- Zohocorp
- Retrieved at
- 2026-11-14T00:51:03+00:00
- Src batch id
- euvd-20261112T133401Z-1352cd
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-124368
- Score
- 9.1
- Euvd base score version
- 3.1
- Fetched at
- 2026-11-12T13:34:20+00:00
- Euvd vendor
- Zohocorp
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- First seen by Signal
- 2026-11-12T13:34:21+00:00
- Euvd base score
- 9.1
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Content hash
- 497dd0a786d9c76c214dbafd3f45263157259406143599baa8e389787559042e
- Published at
- 2026-11-12T13:17:16.347
- Last modified
- 2026-11-12T19:02:35.830
- Euvd updated
- 2026-11-12T12:16:50+00:00
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph