CVE-2026-15358CWE-428

CVE-2026-15358

High · published September 23, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
65.2
In the wild
Unconfirmed
What it is

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01094 · 65.2th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-09-23T16:17Z
References (1)
https://www.manageengine.com/itom/advisory/cve-2026-15358.html · 0fc0942c-577d-436f-ae8e-945763c79b02
EPSS history
Timeline
  • 25 SEP 03:24Z
    EPSS moved — → 1%
    epss
  • 23 SEP 11:36Z
    Path Traversal Vulnerability
    cvelistv5