CVE Catalog
CVE-2026-12571
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk1.63%
74th percentile - higher than 74% of all known CVEs
Summary
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.
Risk Assessment
An attacker could take over a user account, potentially leading to unauthorized system access.
Recommendation
Install security updates for ManageEngine DDI Central and strengthen the password reset process.
Original NVD description (English source)
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.