High · 7.5 CVE-2026-15358 EUVD-2026-85237GHSA-gjx4-2qj7-4q8h

Path Traversal Vulnerability

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Zohocorp

Vendor: Zohocorp Product: ManageEngine Network Configuration Manager Product: ManageEngine OpManager

Description

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability.

Affected products

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine OpManager	< 12.8.671	12.8.671
Zohocorp	ManageEngine Network Configuration Manager	< 12.8.671	12.8.671

References

https://www.manageengine.com/itom/advisory/cve-2026-15358.html