← Back to browse · API

CVE-2026-12571

Severity
CRITICAL
CVSS
9.8
EPSS
0.01632
Risk score
39.77
CISA KEV
No
PoC
No
Published
2026-08-11
Modified
2026-08-12
First seen
2026-08-12
Aliases
EUVD-2026-56557, GHSA-FFFC-2X8V-G95F
Products
Zohocorp:manageengine_ddi_central 0 <6201
Sources
euvd EUVD-2026-56557
nvd CVE-2026-12571

Description

An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.

References