CVE-2026-12266

CVSS 7.6 (high) · published 2026-11-10

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to LDAP bind password exposure through insufficiently protected LDAP settings API.

Weakness: CWE-862

Source: NVD CVE-2026-12266

References

• https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.