OCTOBER 9, 2026
Live Feed
Back to database
Case File

CVE-2026-12264

HIGH · CVSS 8.8 EPSS 1.95% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-28 · Last synced 2026-10-08

CyberRota Analysis

AI-Generated

Zohocorp ManageEngine DDI Central versions prior to 6201 are susceptible to an arbitrary file write vulnerability through HA Failover Config sync uploads, which can lead to remote code execution. This high-severity flaw poses significant risks to the integrity and security of affected systems. Organizations utilizing these versions should prioritize immediate updates to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-12264
Severity
HIGH
CVSS
8.8
EPSS
1.95%

Original NVD Description

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution.