{"id":"CVE-2026-19422","aliases":["EUVD-2026-124368","GHSA-rxpq-3c54-wv69"],"status":"published","title":"Authentication Bypass","description":"Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2026-11-12T12:16:50Z","modified":"2026-11-12T15:31:56Z","products":[{"vendor":"manageengine","product":"ddi central"},{"vendor":"zohocorp","product":"ddi central"}],"references":[{"url":"https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2026-19422.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19422"},{"url":"https://github.com/advisories/GHSA-rxpq-3c54-wv69"}],"sources":{"cve":[{"id":"CVE-2026-19422","title":"Authentication Bypass","description":"Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.","status":"published","published":"2026-11-12T12:16:50.068Z","modified":"2026-11-12T12:16:50.068Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-12T13:43:03.421444Z"}],"euvd":[{"id":"EUVD-2026-124368","description":"Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.","status":"published","published":"2026-11-12T12:16:50Z","modified":"2026-11-12T12:16:50Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-12T17:34:19.905469Z"}],"ghsa":[{"id":"GHSA-rxpq-3c54-wv69","title":"Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass...","description":"Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.","status":"published","published":"2026-11-12T15:31:55Z","modified":"2026-11-12T15:31:56Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"cwes":["CWE-306"],"updated_at":"2026-11-12T15:41:48.145534Z"}],"nvd":[{"id":"CVE-2026-19422","description":"Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.","status":"published","published":"2026-11-12T13:17:16.347Z","modified":"2026-11-12T19:02:35.83Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-12T15:31:33.409684Z"}]}}