CVE-2026-12573

CVSS 8.8 (high) · published 2026-11-10

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injection via DHCP pool name leading to arbitrary commands on managed Cisco routers.

Weakness: CWE-77

Source: NVD CVE-2026-12573

References

• https://www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.