CVE-2026-12571

An authentication bypass vulnerability in ManageEngine DDI Central's password-reset workflow enables attackers to gain unauthorized access to user accounts, potentially leading to full account takeover. Organizations utilizing this software should prioritize immediate remediation efforts due to the critical severity of this issue, as it poses significant risks to user data and system integrity.