CVE-2026-18912

CVSS 8.1 (high) · published 2026-09-18

Zoho Corporation ManageEngine DataSecurity Plus versions below 6310 are vulnerable to an authenticated SQL injection vulnerability in reports module where an authenticated technician could execute arbitrary SQL queries.

Weakness: CWE-89

Source: NVD CVE-2026-18912

References

• https://www.manageengine.com/data-security/cve-2026-18912.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.