Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2026-12370

Remote Code Execution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zohocorp

Description

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zohocorp ManageEngine OpManager

Default version status: unaffected

  • 0 to < 12.8.668affected

Zohocorp ManageEngine NetFlow Analyzer

Default version status: unaffected

  • 0 to < 12.8.668affected

Zohocorp ManageEngine Network Configuration Manager

Default version status: unaffected

  • 0 to < 12.8.668affected

References