CVE-2026-18199: Remote Code Execution Vulnerability — Fixed versions

Summary

Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.

Remediation

Inventory every Zohocorp ManageEngine Password Manager Pro deployment, including staging.
Upgrade Zohocorp ManageEngine Password Manager Pro to the fixed version for your release line, listed under Affected versions.
Confirm the running version after the upgrade.

References

Referencehttps://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2026-18199.html

Version	Fixed in
0 – <13236	13236
0 – <8601	8601