CVE-2026-12263

—

CVSS 3.1

8.8 high

EPSS

<1%p51

Published

Aug 13, 2026 (Aug 13, 2026)

Modified

Aug 31, 2026

Description

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

Weakness: CWE-347
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.