CVE-2026-18912
Authenticated SQL injection
Zoho Corporation ManageEngine DataSecurity Plus versions below 6310 are vulnerable to an authenticated SQL injection vulnerability in reports module where an authenticated technician could execute arbitrary SQL queries.
CVSS 3.1 · 8.1 High
EPSS 1.6%
KEV · Not listed
Vendors
Products