High-severity CVE-2026-75869 affects Zohocorp DDI Central

## Overview Zohocorp has disclosed a high-severity vulnerability in ManageEngine DDI Central. This affects versions below 6301. The vulnerability involves an authorization bypass and PowerShell command injection. ## Technical Details Authenticated non-administrative users can exploit this vulnerability. They can target unauthorized Windows DHCP subnets. By using crafted DNS suffix values, attackers may execute arbitrary commands on managed Windows DHCP servers. The CVSS score for this vulnerability is 8.8, indicating a significant risk. ## Impact If exploited, this vulnerability can lead to unauthorized access and control over DHCP servers. This could compromise network integrity and allow attackers to manipulate network configurations. Organizations using affected versions are at heightened risk of data breaches and service disruptions. ## Mitigation Defenders should immediately update to ManageEngine DDI Central version 6301 or later. Regularly review user permissions to ensure that non-administrative users do not have unnecessary access. Implement monitoring to detect any unauthorized attempts to exploit this vulnerability.