PT-2026-33319 · Manageengine · Password Manager Pro+1

Published 2026-04-16 · Updated 2026-04-27 · CVE-2026-5785

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions ManageEngine PAM360 versions prior to 8531 ManageEngine Password Manager Pro versions 8600 through 13230

Description An authenticated SQL injection exists in the query report module. SQL injection is a type of flaw that allows an attacker to interfere with the queries that an application makes to its database.

Recommendations Update ManageEngine PAM360 to version 8531 or later. Update ManageEngine Password Manager Pro to a version outside the 8600 through 13230 range.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-5785

Affected Products

Pam 360

Password Manager Pro

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-5785 · Security Note
• https://manageengine.com/products/passwordmanagerpro/advisory/cve-2026-5785.html · Note
• https://twitter.com/giuseppe_1337/status/2048820802066252260 · Twitter Post
• https://twitter.com/infoflowcloud/status/2045105144241537524 · Twitter Post
• https://twitter.com/CVEnew/status/2045102678015906255 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044873936551182511 · Twitter Post