CVE WATCH / VULNERABILITY DETAIL
CVE-2026-12573
HIGHCVSS 8.8NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Cisco IOS command injection via DHCP pool name leading to arbitrary commands on managed Cisco routers.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124937
- CVE-2026-124911
- CVE-2026-125745 MEDIUM 4.3
- CVE-2026-12572 HIGH 7.2
- CVE-2026-125715 MEDIUM 5.3
- CVE-2026-125712 HIGH 7.5
- CVE-2026-125706 MEDIUM 5.5
- CVE-2026-120326
- CVE-2026-95646 HIGH 8
- CVE-2026-125704 HIGH 7.5