CVE-2026-12574
HIGH
NVD
CVSS Score
8.1
Severity
HIGH
Published
Nov 10, 2026
Vendor
unknown
Description
Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to Server-side HTML/JavaScript injection in analytics PDF generation leading to local file disclosure.