{"id":"CVE-2026-18199","published":"2026-11-02T08:17:36.083","lastModified":"2026-11-02T08:17:36.083","description":"Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-18199.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Authenticated users with low privileges can execute arbitrary code on Zoho ManageEngine Password Manager Pro (before 13236) and PAM360 (before 8601) due to a remote code execution flaw, likely involving unsafe input handling in an authenticated endpoint.","exploitability":"Exploitation requires valid low-privilege credentials and network access; no public exploit is available yet.","blast_radius":"Successful exploitation grants full system compromise (confidentiality, integrity, availability) on the affected server, potentially exposing all managed credentials and enabling lateral movement.","remediation":"Upgrade Password Manager Pro to version 13236 or later, or PAM360 to version 8601 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","authenticated","webapp","credential-theft"],"model":"garnet-coder","analyzedAt":"2026-11-02T09:56:44.362Z"}}