CVE-2026-12268CWE-20

CVE-2026-12268

High · published September 28, 2026

CVSS v3.1
8.8
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.04726 · 91.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-09-28T15:16Z
References (1)
https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html · 0fc0942c-577d-436f-ae8e-945763c79b02
EPSS history
Timeline
  • 30 SEP 03:24Z
    EPSS moved — → 5%
    epss
  • 28 SEP 10:51Z
    Authenticated PowerShell Injection leads to RCE
    cvelistv5