CVE-2026-12263CWE-347

CVE-2026-12263

High · published August 13, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01399 · 72.3th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-08-13T15:17Z
References (1)
https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-12263.html · 0fc0942c-577d-436f-ae8e-945763c79b02
EPSS history
Timeline
  • 13 AUG 10:18Z
    Authentication Bypass
    cvelistv5