PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-5785 Zohocorp CVE debrief

CVE-2026-5785 is a high-severity vulnerability affecting Zohocorp ManageEngine PAM360 and ManageEngine Password Manager Pro. An authenticated SQL injection vulnerability exists in the query report module. Defenders should assess exposure, particularly those managing these systems, as this could lead to data breaches if exploited. The vulnerability allows authenticated users to inject SQL in the query report module, potentially leading to data breaches. ManageEngine has provided advisories for CVE-2026-5785, which defenders should review and apply patches accordingly.

Vendor
Zohocorp
Product
ManageEngine PAM360
CVSS
HIGH 8.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-16
Original CVE updated
2026-10-26
Advisory published
2026-04-16
Advisory updated
2026-10-26

Who should care

System administrators and security teams managing ManageEngine PAM360 and Password Manager Pro should assess exposure and apply patches. They should also restrict access to the query report module and monitor for suspicious activity to prevent potential data breaches. Defenders should verify and apply patches, restrict access, and monitor activity to prevent potential data breaches.

Why it matters

CVE-2026-5785 is a high-severity vulnerability in ManageEngine PAM360 and Password Manager Pro, allowing authenticated SQL injection in the query report module. Defenders should verify and apply patches, restrict access, and monitor activity to prevent potential data breaches.

  • Potential data breaches through SQL injection
  • Need for patch verification and application
  • Monitoring for suspicious query report activity

Technical summary

CVE-2026-5785 affects ManageEngine PAM360 versions before 8531 and Password Manager Pro versions from 8600 to 13230. The vulnerability allows authenticated users to inject SQL in the query report module, potentially leading to data breaches. Defenders should assess exposure and apply patches to prevent exploitation. ManageEngine has provided advisories for CVE-2026-5785.

Defensive priority

Verify and apply patches, restrict access to query report module

Recommended defensive actions

  • Apply patches for ManageEngine PAM360 and Password Manager Pro
  • Restrict access to the query report module
  • Monitor for suspicious activity

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. ManageEngine has an advisory for CVE-2026-5785. The vulnerability affects ManageEngine PAM360 versions before 8531 and Password Manager Pro versions from 8600 to 13230. Defenders should verify and apply patches, restrict access, and monitor activity to prevent potential data breaches. The CVE Program and NVD provide official records and details on the vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-5785 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-5785

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-5785 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-5785

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-5785.html

    0fc0942c-577d-436f-ae8e-945763c79b02

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.