CVE-2026-95646
HIGH
NVD
CVSS Score
8
Severity
HIGH
Published
Nov 10, 2026
Vendor
unknown
Description
Zoho Corporation ManageEngine DDI Central versions 6500 and below are vulnerable to a Unicode-based command injection vulnerability in the Cisco IOS DHCP configuration functionality. This vulnerability could allow cluster-scoped operators to inject specially crafted Unicode characters, resulting in the execution of unintended device commands.