CVE-2026-12573: Command Injection

Q: What access does an attacker need to exploit this issue?

The attacker needs low-privileged access to ManageEngine DDI Central. No user interaction is required, and the vulnerable attack vector is network-accessible.

Q: Which systems are directly at risk?

ManageEngine DDI Central versions 6200 and below are affected. Successful exploitation can lead to arbitrary command execution on Cisco routers managed through the product when a DHCP pool name is processed.

Q: What is the likely impact of successful exploitation?

An attacker may execute arbitrary Cisco IOS commands on managed Cisco routers. The reported impact includes high confidentiality, integrity, and availability impact.

Published Nov 10, 2026

Updated

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injection via DHCP pool name leading to arbitrary commands on managed Cisco routers.

Affected Software

1 affected component

Zoho ManageEngine DDI Central<=6200

Event History

Nov 10, 2026

CVE Published

via NVD·12:17 PM

Data Sourced

via NVD·12:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker needs low-privileged access to ManageEngine DDI Central. No user interaction is required, and the vulnerable attack vector is network-accessible.

Which systems are directly at risk?

ManageEngine DDI Central versions 6200 and below are affected. Successful exploitation can lead to arbitrary command execution on Cisco routers managed through the product when a DHCP pool name is processed.

What is the likely impact of successful exploitation?