VulnerabilityAwaiting Analysis

CVE-2026-5785

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module.

HIGH 8.1EPSS 1.39%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.39%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module.

CVSS 3.1: 8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS: 1.39% probability · 71th percentile
CISA KEV: Not listed
Weakness: CWE-89
Source: 0fc0942c-577d-436f-ae8e-945763c79b02

References

https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-5785.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.