CVE Catalog

CVE-2026-12263

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Summary

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

Risk Assessment

Risk includes unauthorized access to the password management system, potentially leading to exposure of credentials.

Recommendation

Upgrade Password Manager Pro to version 13232 or later and PAM360 to version 8551 or later.

Original NVD description (English source)

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS