CVE-2026-14828

8.8 highEPSS 3.1%

High (8.8). EPSS 3.1% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerability.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2026-09-02
Modified: 2026-09-08
Record from: the NVD, synced 2026-10-19

References

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-14828.html

Check your stack JSON