CVE-2026-11840

HIGH

CVE: CVE-2026-11840 - Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authentic...Sign in to save

CVSS

8.8

CVSS v3.1

EPSS

N/A

Exploit Prediction Score

Published

August 13, 2026

Exploitability

No EPSS data available

Description

Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection.

Weaknesses

CWE-89

Affected Packages

No package data available.

Aliases

CVE-2026-11840

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-11840.html