CVE-2026-11840

ManageEngine Password Manager Pro versions prior to 13232 and PAM360 versions before 8552 are susceptible to authenticated SQL injection vulnerabilities, allowing attackers to manipulate database queries and potentially access sensitive information. This high-severity flaw (CVSS 8.8) poses a significant risk to organizations using these products, particularly those managing critical credentials and secrets. Organizations utilizing these versions should prioritize immediate updates to mitigate potential data breaches.