CVE-2026-12263
Received Received - Intake

Authentication Bypass in ManageEngine Password Manager Pro

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: ManageEngine

Description
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-12263
EUVD
EUVD-2026-57776

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
zohocorp manageengine_password_manager_pro to 13232 (exc)
zohocorp pam360 to 8551 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-12263 is an authentication bypass vulnerability in Zohocorp ManageEngine Password Manager Pro and PAM360. It allows any authenticated user to log in as another user due to improper SAML validation, enabling unauthorized access to sensitive data.

Detection Guidance

To detect this vulnerability, check the versions of Password Manager Pro and PAM360 installed on your system. Compare them against the fixed versions (13232 for Password Manager Pro and 8551 for PAM360). If your versions are below these, the system is vulnerable.

Impact Analysis

This vulnerability allows attackers to gain unauthorized access to user accounts, potentially leading to data theft, privilege escalation, or further network compromise. It affects systems running vulnerable versions of Password Manager Pro or PAM360.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Upgrade Password Manager Pro to version 13232 or later and PAM360 to version 8551 or later. Download upgrade packs from official ManageEngine websites and apply them immediately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12263. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart