CVE-2026-19422Zohocorp DDI Central

Authentication Bypass

Not on CISA's list of exploited flaws, and not in the news we track.

SeverityCVSS

9.1of 10, critical

010

Exploited in the wild: Not confirmedBy CISA
Chance of exploitation: Not scored yetEPSS, next 30 days
Used in ransomware: Not known
US federal deadline: None set

Reading the vendor advisory

Fix it in one click

Fix it in your code

Claude Code Codex Cursor Claude Code (web)

Explain it to me

Claude ChatGPT

Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-19422. Nothing runs until you send it.

About this flaw

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.

Published: 12 Nov 2026
Weakness: CWE-306

What should I do about this?

Advisories and references

manageengine.commanageengine.com/dns-dhcp-ipam/security-updates/cve-2026-19422.html