PT-2026-145773

CVE-2026-19421

·

Published

2026-11-12

·

Updated

2026-11-12

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central versions prior to 6301
Description Insufficient validation of user-supplied TXT record values in Windows DNS operations allows for PowerShell injection. This occurs when the system fails to properly sanitize input used in PowerShell commands during DNS record management.
Recommendations Update ManageEngine DDI Central to version 6301 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')
Related identifiers
CVE-2026-19421
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com