Zoho ManageEngine DDI Central Vulnerable to High-Severity Command Injection

## Overview Zoho Corporation disclosed a high-severity vulnerability in ManageEngine DDI Central. The issue is tracked as CVE-2026-12573. It affects versions 6200 and below. This vulnerability allows for Cisco IOS command injection via the DHCP pool name. ## Technical Details The command injection occurs when an attacker manipulates the DHCP pool name. This can lead to arbitrary commands being executed on managed Cisco routers. The CVSS score for this vulnerability is 8.8, indicating a high level of risk. Attackers can exploit this flaw without authentication, making it particularly dangerous for organizations using affected versions. ## Impact Successful exploitation of this vulnerability can lead to unauthorized command execution on Cisco routers. This could compromise network integrity and allow attackers to manipulate network configurations or intercept data. Organizations using affected versions should be aware of the potential for significant operational disruption. ## Mitigation Defenders should immediately upgrade to ManageEngine DDI Central version 6201 or later to mitigate this vulnerability. Regularly reviewing and updating software can help prevent similar issues in the future. Additionally, monitoring network traffic for unusual DHCP activity may help detect exploitation attempts.