{"id":"CVE-2026-75868","kind":"vulnerability","aliases":["CVE-2026-75868"],"related":[],"title":"ManageEngine DDI Central: authorization bypass lets users change DHCP subnet options","description":"Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authorization bypass vulnerability that allowed authenticated non-administrative users to modify DHCP options on subnets belonging to unauthorized clusters.","summary":"ManageEngine DDI Central versions below 6301 let authenticated non-administrative users modify DHCP options on subnets belonging to clusters they are not authorized for. An attacker with a low-privilege account can alter network configuration they should not control.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ddi-central","dhcp","manageengine","vendor","windows"],"not_affected_if":["no-non-admin-users","version-6301-or-later"],"how_to_check":"- Check the installed DDI Central version in the product's About or status page against `6301`","fix":"- DDI Central versions from `6301` onward","status":"open","published_at":"2026-11-12T13:17:16+00:00","first_seen_at":"2026-11-12T13:38:24+00:00","triaged_at":"2026-11-12T13:38:46+00:00","updated_at":"2026-11-12T13:38:46+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-12T13:38:46Z","model":"claude-haiku-5-5","output":{"fix":"- DDI Central versions from `6301` onward\n- unknown","reach":"network","title":"ManageEngine DDI Central: authorization bypass lets users change DHCP subnet options","impact":"medium","summary":"ManageEngine DDI Central versions below 6301 let authenticated non-administrative users modify DHCP options on subnets belonging to clusters they are not authorized for. An attacker with a low-privilege account can alter network configuration they should not control.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["manageengine","ddi-central","dhcp","windows"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"authenticated low-privilege user changes DHCP options on other subnets","analyst_note":"Confirm the affected platform (Windows or Linux) and the exact vendor advisory URL for DDI Central 6301; the NVD entry alone does not give check steps.","how_to_check":"- Check the installed DDI Central version in the product's About or status page against `6301`\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-6301-or-later","no-non-admin-users"],"who_is_affected":"Organizations running ManageEngine DDI Central below version 6301 where non-administrative users hold accounts. Exposure depends on the presence of clusters and subnets that those users should not be able to manage. Installations at 6301 or later are not affected by this flaw.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000724,"input_tokens":4536,"output_tokens":541,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-75868':14A,17A '6301':30B,72C 'account':57B 'administr':35B,85C 'affect':74C 'allow':81C 'alter':59B 'attack':51B 'authent':32B,82C 'author':4A,48B,77C 'belong':42B,93C 'bypass':5A,78C 'central':3A,20B,27B,69C 'chang':8A 'cluster':44B,96C 'configur':61B 'control':65B 'cve':12A,15A 'ddi':2A,19B,26B,68C 'ddi-centr':18B 'dhcp':9A,21B,38B,89C 'let':6A,31B 'low':55B 'low-privileg':54B 'manageengin':1A,22B,25B,67C 'modifi':37B,88C 'network':60B 'non':34B,84C 'non-administr':33B,83C 'option':11A,39B,90C 'privileg':56B 'subnet':10A,41B,92C 'unauthor':95C 'user':7A,36B,86C 'vendor':23B 'version':28B,70C 'vulner':79C 'window':24B 'zohocorp':66C","nicknames":[],"mitigations":[],"who_affected":"Organizations running ManageEngine DDI Central below version 6301 where non-administrative users hold accounts. Exposure depends on the presence of clusters and subnets that those users should not be able to manage. Installations at 6301 or later are not affected by this flaw.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ddicentral","dhcp","high","manageengine","vendor","windows"],"campaign_type":null,"search_a":"'-2026':13A,16A '-75868':14A,17A 'author':4A 'bypass':5A 'central':3A 'chang':8A 'cve':12A,15A 'ddi':2A 'dhcp':9A 'let':6A 'manageengin':1A 'option':11A 'subnet':10A 'user':7A","search_b":"'6301':30B 'account':57B 'administr':35B 'alter':59B 'attack':51B 'authent':32B 'author':48B 'belong':42B 'central':20B,27B 'cluster':44B 'configur':61B 'control':65B 'ddi':19B,26B 'ddi-centr':18B 'dhcp':21B,38B 'let':31B 'low':55B 'low-privileg':54B 'manageengin':22B,25B 'modifi':37B 'network':60B 'non':34B 'non-administr':33B 'option':39B 'privileg':56B 'subnet':41B 'user':36B 'vendor':23B 'version':28B 'window':24B","search_c":"'6301':72C 'administr':85C 'affect':74C 'allow':81C 'authent':82C 'author':77C 'belong':93C 'bypass':78C 'central':69C 'cluster':96C 'ddi':68C 'dhcp':89C 'manageengin':67C 'modifi':88C 'non':84C 'non-administr':83C 'option':90C 'subnet':92C 'unauthor':95C 'user':86C 'version':70C 'vulner':79C 'zohocorp':66C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T13:17:16+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss_by":"0fc0942c-577d-436f-ae8e-945763c79b02","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-75868","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75868","severity":null,"published_at":"2026-11-12T13:17:16+00:00","modified_at":"2026-11-12T13:17:16+00:00","first_seen_at":"2026-11-12T13:38:24+00:00","fetched_at":"2026-11-12T13:38:24+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}