CVE-2026-18199
Received Received - Intake

Authenticated Remote Code Execution in Zoho ManageEngine Password Manager Pro and PAM360

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: ManageEngine

Description
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-18199

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Zohocorp ManageEngine Password Manager Pro 0
Zohocorp ManageEngine PAM360 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-18199 is an authenticated remote code execution vulnerability affecting Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601. The flaw allows authenticated attackers to execute arbitrary operating-system commands due to improper server-side validation and escaping of special characters.

Detection Guidance

To detect this vulnerability, check the installed versions of ManageEngine Password Manager Pro and PAM360. If you are running versions before 13236 (Password Manager Pro) or 8601 (PAM360), the system is vulnerable. Use commands like 'curl -s http://[target]/version.jsp' or check the product's about page to verify the version.

Impact Analysis

This vulnerability can allow attackers with valid credentials to run malicious commands on the affected systems, potentially leading to unauthorized access, data theft, or system compromise. It may also enable lateral movement within a network if the compromised system has further access.

Compliance Impact

This vulnerability allows authenticated attackers to execute arbitrary operating-system commands, which could lead to unauthorized access to sensitive data. For GDPR, this could result in data breaches requiring notification under Article 33. For HIPAA, it may compromise protected health information, violating the Security Rule. Compliance programs relying on these products must address this risk to avoid penalties.

Mitigation Strategies

Immediately upgrade ManageEngine Password Manager Pro to version 13236 or later and PAM360 to version 8601 or later. Download the latest upgrade packs from ManageEngine's official website and apply them to patch the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18199. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...