CVE-2026-12268

Summary

This flaw allows PowerShell command injection in Windows DNS SPF/TXT record push, leading to remote code execution. Attackers can exploit this to gain full control over affected ManageEngine DDI Central instances.

Exploitability

Exploitation requires administrative access to the affected version of ManageEngine DDI Central and the ability to push DNS records. The vulnerability is relatively easy to exploit given these preconditions.

Blast radius

If exploited, the impact is high as it allows full remote code execution, potentially leading to complete compromise of the affected system and its network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to ManageEngine DDI Central version 6201 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.