CVE-2026-5785 - Vulnerability Analysis

Overview

Zohocorp ManageEngine PAM360 < 8531 and Password Manager Pro 8600 to 13230 contain an authenticated SQL injection caused by improper input sanitization in the query report module, letting authenticated attackers execute arbitrary SQL queries.

Severity & Score

Impact

Authenticated attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Upgrade PAM360 to version 8531 or later and Password Manager Pro to version 13231 or later.

References

• https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-5785.html

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 16, 2026

🟠 CVE-2026-5785 - High (8.1) Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5785/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner