OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-18912

HIGH · CVSS 7.7 EPSS 1.50%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

ManageEngine DataSecurity Plus versions prior to 6310 are susceptible to an authenticated SQL injection vulnerability within the Reports module, enabling authenticated users to execute arbitrary SQL queries. This flaw poses a significant risk as it could lead to unauthorized data access or manipulation. Organizations using affected versions should prioritize remediation to mitigate potential data breaches and maintain system integrity.

CVE
CVE-2026-18912
Severity
HIGH
CVSS
7.7
EPSS
1.50%

Original NVD Description

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL queries through the Reports module.