CVE-2026-12571

An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...

CVE-2026-12571 Authentication Bypass Leading to Account Takeover

An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...

CVE-2026-12571

The CVE-2026-12571 entry describes an authentication bypass in ManageEngine DDI Central’s password-reset workflow that enables account takeover. The NVD entry confirms a critical impact (CVSS 3.1: 9.8, NETWORK attack vector, no user interaction) with high impact on confidentiality, integrity, and...

EUVD-2026-56557

An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...

PT-2026-70365

Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central affected versions not specified Description An authentication bypass exists in the password-reset workflow, which could allow an attacker to perform an account takeover. Recommendations At the moment, there is no...

EUVD-2024-24527

Malicious code in bioql PyPI...

EUVD-2024-46684

Malicious code in bioql PyPI...

CVE-2024-5471

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

CVE-2024-5471

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

CVE-2024-27311

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

CVE-2024-5471 Agent takeover

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

CVE-2024-5471 Agent takeover

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

CVE-2024-5471

The CVE-2024-5471 entry affects Zohocorp ManageEngine DDI Central versions 4001 and prior, with an agent takeover vulnerability caused by hard-coded sensitive keys. Public data show high to critical impact (CVE scores include 8.8–9.8 base severity; network attack vector; no user interaction in so...

CVE-2024-27311 Arbitrary file writing

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

CVE-2024-27311 Arbitrary file writing

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

CVE-2024-27311

CVE-2024-27311 affects Zohocorp ManageEngine DDI Central versions 4001 and prior. The issue is a directory traversal vulnerability that allows an attacker to upload new files to the server folder, effectively enabling arbitrary file writing. The PT-2024-21813 datasource confirms the vulnerable ve...

PT-2024-21813 · Zohocorp · Manageengine Ddi Central

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine DDI Central versions 4001 and prior Description: The issue allows a user to upload new files to the server folder due to a directory traversal vulnerability. Recommendations: For versions 4001 and prior, consider...