CVE-2026-19422: Authentication Bypass

Published Nov 12, 2026

Updated

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Zohocorp ManageEngine DDI Central to a version that resolves this vulnerability.
Fixed in 6301

Event History

Nov 12, 2026

CVE Published

via MITRE·12:16 PM

Data Sourced

via MITRE·12:16 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

ManageEngine DDI Central deployments running a version below 6301 are affected where the Windows DNS and DHCP agent synchronization APIs are in use.

What access does an attacker need to exploit it?

The vulnerability is exploitable remotely without authentication or user interaction. An attacker can impersonate an onboarded Windows server through the affected synchronization APIs.

What could an attacker do after exploitation?

An attacker may perform unauthorized DNS and DHCP modifications, affecting the integrity and availability of those services.