CVE-2026-14828

Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerability.

Score

CVSS 3.1 8.8 High

Status

Awaiting Analysis - 0fc0942c-577d-436f-ae8e-945763c79b02

Published

2026-09-02

Last modified

2026-09-03

Weaknesses

CWE-89

Affected products

• Manageengine Access Manager Plus (Zohocorp)
• Manageengine Pam360 (Zohocorp)
• Manageengine Password Manager Pro (Zohocorp)

References

• https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-14828.html