CVE-2026-11840

—

CVSS 3.1

8.8 high

EPSS

2%p74

Published

Aug 13, 2026 (Aug 13, 2026)

Modified

Aug 31, 2026

Description

Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection.

Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.