CVE-2026-18912

HIGHCVSS 7.7

Description

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL queries through the Reports module.

Timeline

Published:September 18th, 2026 6:16 AM

Last modified:September 18th, 2026 3:17 PM

CVSS Scoring

CVSS v3: 7.7 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

CWE-89

References & Reports

Advisories, patches, and third-party reports

https://www.manageengine.com/data-security/cve-2026-18912.html

Source: NIST NVD · Data may lag official sources by up to one minute