CVE-2026-12572 | BDVDB-2026-402775 Detail
ZohocorpDDI Central
Description#
Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command execution as the PostgreSQL service account.
Impact#
CAPEC-66 – SQL Injection
Weaknesses#
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.