High severity8.0NVD Advisory· Published Nov 10, 2026

CVE-2026-95646

Description

Zoho Corporation ManageEngine DDI Central versions 6500 and below are vulnerable to a Unicode-based command injection vulnerability in the Cisco IOS DHCP configuration functionality. This vulnerability could allow cluster-scoped operators to inject specially crafted Unicode characters, resulting in the execution of unintended device commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoho Corporation/ManageEngine DDI Centralllm-create
Range: <=6500

Patches

Vulnerability mechanics

References

www.manageengine.com/dns-dhcp-ipam/security-updates/security-updates.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000