CVE-2026-19422— Authentication Bypass

Quick assessment

Affected

Zohocorp DDI Central

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Zohocorp ManageEngine DDI Central 6301 版本之前的版本受 Windows DNS 和 DHCP 代理同步 API 中的身份验证绕过漏洞影响。该漏洞允许未认证用户伪装成已接入的 Windows 服务器，并执行未经授权的 DNS 和 DHCP 配置修改。

CVSS 9.1 · Critical Updated Nov 12, 2026

Possible ATT&CK Techniques 3 AI

T1583 · Acquire Infrastructure T1078 · Valid Accounts T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Authentication Bypass

Source: CVE Program / CVE List V5

Vulnerability Description

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

关键功能的认证机制缺失

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Zohocorp	DDI Central	0 ~ 6301	-

II. Public POCs for CVE-2026-19422

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-19422

请登录查看更多情报信息。

Other References for CVE-2026-19422 (1)

https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2026-19422.html

https://www.cve.org/CVERecord?id=CVE-2026-19422

Same Patch Batch · Zohocorp · 2026-11-12 · 8 CVEs total

CVE-2026-12591	9.9 CRITICAL	Privilege Escalation
CVE-2026-12507	9.1 CRITICAL	Authenticated remote code execution
CVE-2026-19421	8.8 HIGH	Authenticated Injection
CVE-2026-75869	8.8 HIGH	Authenticated command injection
CVE-2026-75864	8.1 HIGH	Broken Access Control
CVE-2026-75867	8.1 HIGH	Broken Access Control
CVE-2026-75868	8.1 HIGH	Broken Access Control

IV. Related Vulnerabilities

Same product: DDI Central

Same vendor: Zohocorp

Same weakness: CWE-306