Unauthenticated Keytab Update Vulnerability in Zoho ManageEngine DDI Central
CVE-2026-95651

7.5HIGH

Key Information:

Vendor

Zohocorp
Status
Ddi Central
Vendor
CVE Published:
10 November 2026

What is CVE-2026-95651?

Zoho Corporation ManageEngine DDI Central versions 6500 and below are exposed to a vulnerability that allows unauthenticated attackers to exploit keytab updates within the Linux Node Agent. This vulnerability could lead to unauthorized access and manipulation of the DDI Central system, creating significant risks for the integrity and confidentiality of network operations. Organizations utilizing affected versions should prioritize applying the necessary security updates to mitigate this risk.

Affected Version(s)

DDI Central 0 < 6500

References

https://www.manageengine.com/dns-dhcp-ipam/security-updat...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.