CVE Catalog
CVE-2026-12571
CriticalCVSS 9.8Summary
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.
Risk Assessment
An attacker could take over a user account, potentially leading to unauthorized system access.
Recommendation
Install security updates for ManageEngine DDI Central and strengthen the password reset process.
Original NVD description (English source)
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.