Skip to content
OpenAdvisories
High · 8.1 CVE-2026-18912 EUVD-2026-82656GHSA-97w7-v7hh-7f39

Authenticated SQL injection

Published Sep 18, 2026 · Updated Nov 11, 2026 · Assigned by Zohocorp

Description

Zoho Corporation ManageEngine DataSecurity Plus versions below 6310 are vulnerable to an authenticated SQL injection vulnerability in reports module where an authenticated technician could execute arbitrary SQL queries.

Affected products

VendorProductAffectedFixed
Zohocorp DataSecurity Plus < 6310 6310

References