CVE-2026-18911

Summary

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication.

Affected Software

Weaknesses

• CWE-20: CWE-20 Improper input validation

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.manageengine.com/data-security/cve-2026-18911.html

• ←Previous
• Next→