CVE-2026-18911 in ManageEngine DataSecurity Plus

Riassunto

di MITRE • 18/09/2026

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: Zohocorp
• Prenotare: 05/08/2026
• Divulgazione: 18/09/2026
• Moderazione: accettato
• Voce: VDB-407343
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 7.5 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18911
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18911
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18911/