PatchSiren cyber security CVE debrief

CVE-2026-18199 Zohocorp CVE debrief

CVE-2026-18199 is a high-severity vulnerability affecting Zohocorp ManageEngine Password Manager Pro and PAM360. An authenticated remote code execution vulnerability exists in versions before 13236 and 8601, respectively. Defenders should assess exposure, prioritize remediation, and verify vendor-provided information. This vulnerability has a high CVSS score of 8.8, indicating high severity. The CVE record and NVD entry provide limited information about the vulnerability, so further verification is required to determine affected versions and remediation steps. It is essential to review the supplied official advisory or CVE record to validate affected scope, severity, and vendor

Vendor: Zohocorp
Product: ManageEngine Password Manager Pro
CVSS: HIGH 8.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-11-02
Original CVE updated: 2026-11-02
Advisory published: 2026-11-02
Advisory updated: 2026-11-02

Who should care

Defenders responsible for Password Manager Pro and PAM360 instances should assess exposure and prioritize remediation due to the high-severity nature of the vulnerability.

Why it matters

CVE-2026-18199 is a high-severity vulnerability affecting Password Manager Pro and PAM360, with potential for authenticated remote code execution. Defenders should assess exposure, prioritize remediation, and verify vendor-provided information.

Potential for authenticated remote code execution
High CVSS score indicating high severity
Requires verification of affected versions and remediation steps

Technical summary

CVE-2026-18199 is a high-severity vulnerability affecting Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601. An authenticated remote code execution vulnerability exists, with a CVSS score of 8.8. This vulnerability allows attackers to execute code remotely, which can lead to significant damage. Defenders should assess exposure of Password Manager Pro and PAM360 instances, prioritize remediation for affected versions, and verify vendor-provided remediation information. The CVE record and NVD entry provide limited

Defensive priority

High priority for remediation due to high CVSS score and potential for code execution.

Recommended defensive actions

Assess exposure of Password Manager Pro and PAM360 instances
Prioritize remediation for affected versions
Verify vendor-provided remediation information

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine affected versions and remediation steps.

Sources and references

Verified primary and authoritative sources

CVE-2026-18199 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-18199

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-18199 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-18199

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source reference
Unverified legacy reference

URL: https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-18199.html

0fc0942c-577d-436f-ae8e-945763c79b02

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.