OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-18911

HIGH · CVSS 7.5 EPSS 1.06%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

ManageEngine DataSecurity Plus versions prior to 6310 are susceptible to an agent authentication bypass, enabling unauthorized agents to send requests without proper authentication. This vulnerability poses a significant risk as it could lead to unauthorized access to sensitive data and system controls. Organizations using affected versions should prioritize remediation to mitigate potential data breaches and ensure compliance with security protocols.

CVE
CVE-2026-18911
Severity
HIGH
CVSS
7.5
EPSS
1.06%

Original NVD Description

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication.