CVE-2026-12269CWE-269CWE-434unrestricted-file-uploadprivilege-escalation

CVE-2026-12269

High · published September 28, 2026

CVSS v3.1
8.8
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.06991 · 94.1th percentile
Weaknesses
CWE-269 · Improper Privilege Management; CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-09-28T15:16Z
References (1)
https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2026-12269.html · 0fc0942c-577d-436f-ae8e-945763c79b02
EPSS history
Timeline
  • 30 SEP 03:24Z
    EPSS moved — → 7%
    epss
  • 28 SEP 10:37Z
    Authenticated File Write to RCE via keepalived in DDI Central
    cvelistv5