CISA KEV catalog
Confirmed active exploitation.
Listed in CISA's catalog of Known Exploited Vulnerabilities: attackers are using it in real attacks. Patch it with priority.
- Name
- Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)
Affected products
zohocorp: manageengine access manager plus; zohocorp: manageengine pam360; zohocorp: manageengine password manager pro
References5
- www.manageengine.com/products/passwordmanagerpro/advisory/cve-2… PatchVendor Advisory
- www.manageengine.com/products/passwordmanagerpro/advisory/cve-2… PatchVendor Advisory
- packetstormsecurity.com/files/167918/Zoho-Password-Manager-Pro-… ExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/167918/Zoho-Password-Manager-Pro-… ExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=… US Government Resource
Metrics
- CVSS 3.1
-
9.8
CRITICAL
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 100% percentile: 100 · as of 2 November 2026
- CWE
- CWE-502