CVE-2026-11840

8.8 highEPSS 3.1%

High (8.8). EPSS 3.1% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-08-13
Modified: 2026-08-31
Record from: the NVD, synced 2026-10-19

References

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-11840.html

Check your stack JSON