Live › vulnerability › CVE-2026-18199
Password Manager Pro and PAM360 from Zohocorp contain an authenticated remote code execution flaw. An attacker with a valid account on the product can run code on the server running it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 08:22 UTC. All times on this page are UTC.
Organisations running ManageEngine Password Manager Pro before 13236 or PAM360 before 8601 are exposed. An attacker needs a valid login on the product, so restricting who holds accounts reduces exposure. unknown for whether deployments outside these version ranges are affected.
No product ranges from the sources yet.
13236860113236 or later8601 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.
This page as .md · .json · in your agent: get_signal("CVE-2026-18199")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.