{"metadata": {"vulnerability": "CVE-2026-19422", "count": 15, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 5}, "linked_omitted": 0}, "data": [{"timestamp": "2026-08-10T10:54:36.168Z", "date_only": false, "value": "2026-08-10T10:54:36.168Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-19422", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-12T12:16:50.068Z", "date_only": false, "value": "2026-11-12T12:16:50.068Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-19422", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-12T12:16:50.068Z", "date_only": false, "value": "2026-11-12T12:16:50.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-19422", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-12T12:16:50.068Z", "date_only": false, "value": "2026-11-12T12:16:50.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zohocorp", "record": "CVE-2026-19422", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-12T12:30:03.593Z", "date_only": false, "value": "2026-11-12T12:30:03.593723Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n24hwbrtjc2a", "record": "CVE-2026-19422", "field": "creation_timestamp", "uuid": "0f28f116-2985-4373-94c2-1562dce43d9c", "content": "CVE-2026-19422 - ddi central\nVersions of ManageEngine DDI Central prior to 6301 let anyone connect to its Windows DNS and DHCP sync feature without proving who they are. This can let an attacker pretend\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ddicentral #zohocorp #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n24hwbrtjc2a"}, {"timestamp": "2026-11-12T12:30:14.448Z", "date_only": false, "value": "2026-11-12T12:30:14.448115Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117603474725136061", "record": "cve-2026-19422", "field": "creation_timestamp", "uuid": "f52a84be-3a8a-489a-a4c3-0842031d5a9f", "content": "CVE-2026-19422 Authentication Bypass Zohocorp ManageEngine DDI Central versions below 6301 is affected by an authentication bypass vulnerability in Windows DNS and DHCP agent synchronization APIs, allowing unauthenticated user to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications.\nhttps://www.cve.org/CVERecord?id=CVE-2026-19422https://www.manageengine.com/dns-dhcp-ipam/security-updates/cve-2026-19422.html#manageengine #Zohocorp #DDICentral#CVE_2026_19422#bot", "url": "https://infosec.exchange/users/cve/statuses/117603474725136061"}, {"timestamp": "2026-11-12T13:17:16Z", "date_only": false, "value": "2026-11-12T13:17:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RXPQ-3C54-WV69", "record": "GHSA-RXPQ-3C54-WV69", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-12T13:17:16.347Z", "date_only": false, "value": "2026-11-12T13:17:16.347", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19422", "record": "FKIE_CVE-2026-19422", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-12T13:30:44.913Z", "date_only": false, "value": "2026-11-12T13:30:44.913288Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117603712406094151", "record": "cve-2026-19422", "field": "creation_timestamp", "uuid": "c8f9a99d-6f2f-4a51-a552-0a6294fea7b7", "content": "CVE-2026-19422: CRITICAL auth bypass in Zohocorp DDI Central <6301. Unauthenticated attackers can alter DNS/DHCP configs via Windows agent APIs. Patch to 6301+ ASAP! https://radar.offseq.com/threat/cve-2026-19422-cwe-306-missing-authentication-for-critical-functionality-in-zohocorp-ddi-central-b53acf6181938eaf #OffSeq #CyberSecurity #CVE2026 #PatchNow", "url": "https://infosec.exchange/users/offseq/statuses/117603712406094151"}, {"timestamp": "2026-11-12T13:30:46.922Z", "date_only": false, "value": "2026-11-12T13:30:46.922876Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3n24lctn7bn2v", "record": "cve-2026-19422", "field": "creation_timestamp", "uuid": "0626ac67-61cb-4a82-88ab-f3e25382e106", "content": "Zohocorp DDI Central <6301 hit by CRITICAL auth bypass (CVE-2026-19422). Unauthenticated DNS/DHCP changes possible. Upgrade to 6301+ immediately. https://radar.offseq.com/threat/cve-2026-19422-cwe-306-missing-authentication-for-critical-functionality-in-zohocorp-ddi-central-b53acf6181938eaf #OffS...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3n24lctn7bn2v"}, {"timestamp": "2026-11-12T13:46:45.663Z", "date_only": false, "value": "2026-11-12T13:46:45.663907Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3n24m7go5q42h", "record": "CVE-2026-19422", "field": "creation_timestamp", "uuid": "00fb3af0-caf9-4463-8c4a-c6daf3cbc30c", "content": "\ud83d\udd34 CVE-2026-19422 - Critical (9.1)\n\nZohocorp ManageEngine\u00a0DDI Central\u00a0versions below\u00a06301\u00a0is affected by\u00a0an authentication bypas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19422/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3n24m7go5q42h"}, {"timestamp": "2026-11-12T14:07:26.830Z", "date_only": false, "value": "2026-11-12T14:07:26.830357Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3n24negwwtk2o", "record": "CVE-2026-19422", "field": "creation_timestamp", "uuid": "3f791d1e-9671-4a73-9f75-e54ff8b9fdd0", "content": "\ud83d\udea8 CVE-2026-19422 \u2014 CVSS 9.1 CRITICAL\n\nZohocorp ManageEngine\u00a0DDI Central\u00a0versions below\u00a06301\u00a0is affected by\u00a0an authentication bypass vulnerability...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19422\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3n24negwwtk2o"}, {"timestamp": "2026-11-12T15:31:55Z", "date_only": false, "value": "2026-11-12T15:31:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RXPQ-3C54-WV69", "record": "GHSA-RXPQ-3C54-WV69", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-12T15:31:55Z", "date_only": false, "value": "2026-11-12T15:31:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RXPQ-3C54-WV69", "record": "GHSA-RXPQ-3C54-WV69", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-12T19:02:35.830Z", "date_only": false, "value": "2026-11-12T19:02:35.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19422", "record": "FKIE_CVE-2026-19422", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T02:11:25.246Z", "anchors": {"origin": {"timestamp": "2026-11-12T12:16:50.068Z", "date_only": false, "value": "2026-11-12T12:16:50.068Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-19422", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-12T12:16:50.068Z", "date_only": false, "value": "2026-11-12T12:16:50.068Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-19422", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 50075.178228, "hours": 13.90977173, "days": 0.5795738220833333, "min_seconds": 50075.178228, "max_seconds": 50075.178228, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-12T12:16:50.068Z", "date_only": false, "value": "2026-11-12T12:16:50.068Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-19422", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T02:11:25.246Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}