CVE-2026-11840

HighCVSS 8.8

Published: 13/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.58%

73th percentile - higher than 73% of all known CVEs

Summary

Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection.

Risk Assessment

Risk includes unauthorized access to the password database, potentially leading to exposure of credentials.

Recommendation

Upgrade Password Manager Pro to version 13232 or later and PAM360 to version 8552 or later.

Original NVD description (English source)

Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection.