{"id":12383,"date":"2026-11-03T15:24:47","date_gmt":"2026-11-03T21:24:47","guid":{"rendered":"https:\/\/beaconlab.us\/publicacion\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/"},"modified":"2026-11-03T15:25:30","modified_gmt":"2026-11-03T21:25:30","slug":"alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/","title":{"rendered":"Alert 2026-139 Vulnerabilities in ManageEngine Password Manager Pro, PAM360 and SharePoint Manager Plus"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Affected product(s):<\/h2>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Product<\/strong><\/td><td><strong>Affected versions<\/strong><\/td><td><strong>Fixed version<\/strong><\/td><\/tr><tr><td><strong>ManageEngine Password Manager Pro<\/strong><\/td><td>Build 13235 and earlier<\/td><td>13236<\/td><\/tr><tr><td><strong>ManageEngine PAM360<\/strong><\/td><td>Build 8600 and earlier<\/td><td>8601<\/td><\/tr><tr><td><strong>ManageEngine SharePoint Manager Plus<\/strong><\/td><td>Builds earlier than 4508<\/td><td>4508<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<p class=\"wp-block-paragraph\">In SharePoint Manager Plus, CVE-2026-119682 was fixed in build 4507 and CVE-2026-119680 in build 4508.<\/p>\n\n<h2 class=\"wp-block-heading\">Description<\/h2>\n\n<p class=\"wp-block-paragraph\">Three high-severity vulnerabilities have been published in ManageEngine products. The main one, labeled CVE-2026-18199 (CVSSv3.1 8.8 &#8211; HIGH), affects Password Manager Pro and PAM360 and allows an authenticated remote attacker to execute arbitrary operating system commands on the server. It is of the operating system command injection type (CWE-78). The other two, CVE-2026-119680 and CVE-2026-119682, affect SharePoint Manager Plus.<\/p>\n\n<p class=\"wp-block-paragraph\">Password Manager Pro and PAM360 are password and privileged access management solutions that store credentials, SSH keys and certificates, so a compromise of the server can open the door to the rest of the infrastructure.<\/p>\n\n<p class=\"wp-block-paragraph\">The vulnerabilities are detailed below:<\/p>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Identifier<\/strong><\/td><td><strong>Product<\/strong><\/td><td><strong>Score<\/strong><\/td><td><strong>Description<\/strong><\/td><\/tr><tr><td><strong>CVE-2026-18199<\/strong><\/td><td>Password Manager Pro and PAM360<\/td><td>CVSS 3.1: 8.8<\/td><td>Operating system command injection (CWE-78). According to the published information, a low-privilege account is sufficient and no user interaction is required. The vendor fixed it by adding server-side validation and escaping of special characters, without detailing the affected module or parameter.<\/td><\/tr><tr><td><strong>CVE-2026-119680<\/strong><\/td><td>SharePoint Manager Plus<\/td><td>CVSS 4.0: 8.5<\/td><td>Stored XSS (CWE-79). A user with low privileges can inject HTML or JavaScript into attributes used to generate charts (full user names, site names or group names). The code executes in the browser of other users, including administrators, when those charts are displayed.<\/td><\/tr><tr><td><strong>CVE-2026-119682<\/strong><\/td><td>SharePoint Manager Plus<\/td><td>CVSS 4.0: 7.9<\/td><td>Missing authorization (CWE-862). An authenticated user with low privileges can bypass the authorization controls of multi-factor authentication (MFA): read and modify its configuration, enable or disable it, enumerate enrolled users and delete enrolled accounts. This weakens authentication or may leave legitimate users without access.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<p class=\"wp-block-paragraph\">The CVSS vector for CVE-2026-18199 is CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:H\/A:H, and its CVE record was published on 02\/11\/2026.<\/p>\n\n<p class=\"wp-block-paragraph\">As of 03\/11\/2026 there are no reports of active exploitation or public proofs of concept, and none of the three vulnerabilities is listed in the Known Exploited Vulnerabilities (KEV) catalog of the U.S. cybersecurity agency. Its EPSS is 2.45% for CVE-2026-18199 (84th percentile), 0.34% for CVE-2026-119682 and 0.24% for CVE-2026-119680. Researchers point out that ManageEngine products, including PAM360 and Password Manager Pro, have already been targeted by mass exploitation in the past (for example, CVE-2022-47966 and CVE-2022-35405), so the update should not be delayed.<\/p>\n\n<h2 class=\"wp-block-heading\">Mitigation<\/h2>\n\n<p class=\"wp-block-paragraph\">Until the update is applied, it is recommended to:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Restrict access to the Password Manager Pro, PAM360 and SharePoint Manager Plus web console to administrative networks or VPN, without exposing it to the Internet.<\/li>\n\n\n\n<li>Review accounts with console access, remove those that are not used and apply the principle of least privilege, since all three flaws require an authenticated account.<\/li>\n\n\n\n<li>Review audit logs for unusual command execution, unexpected child processes of the PAM360 or Password Manager Pro service, and unauthorized changes to the MFA configuration.<\/li>\n\n\n\n<li>If a compromise of the PAM server is suspected, rotate the privileged credentials it manages.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">Solution<\/h2>\n\n<p class=\"wp-block-paragraph\">The solution is to update to the following versions or later:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Password Manager Pro: build 13236.<\/li>\n\n\n\n<li>PAM360: build 8601.<\/li>\n\n\n\n<li>SharePoint Manager Plus: build 4508, which fixes both vulnerabilities in the product.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">The update packages for each product are listed in the Additional information section.<\/p>\n\n<p class=\"wp-block-paragraph\">For information on how to update, visit the following link:<\/p>\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.manageengine.com\/products\/passwordmanagerpro\/advisory\/cve-2026-18199.html\">https:\/\/www.manageengine.com\/products\/passwordmanagerpro\/advisory\/cve-2026-18199.html<\/a><\/p>\n\n<h2 class=\"wp-block-heading\">Additional information:<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>ManageEngine \u2014 CVE-2026-18199 security advisory:<br \/><a href=\"https:\/\/www.manageengine.com\/products\/passwordmanagerpro\/advisory\/cve-2026-18199.html\" target=\"_blank\" rel=\"noopener\">https:\/\/www.manageengine.com\/products\/passwordmanagerpro\/advisory\/cve-2026-18199.html<\/a><\/li>\n\n\n\n<li>ManageEngine PAM360 \u2014 fixed issues:<br \/><a href=\"https:\/\/www.manageengine.com\/privileged-access-management\/issues-fixed.html\" target=\"_blank\" rel=\"noopener\">https:\/\/www.manageengine.com\/privileged-access-management\/issues-fixed.html<\/a><\/li>\n\n\n\n<li>ManageEngine PAM360 \u2014 upgrade package:<br \/><a href=\"https:\/\/www.manageengine.com\/privileged-access-management\/upgradepack.html\" target=\"_blank\" rel=\"noopener\">https:\/\/www.manageengine.com\/privileged-access-management\/upgradepack.html<\/a><\/li>\n\n\n\n<li>ManageEngine Password Manager Pro \u2014 upgrade package:<br \/><a href=\"https:\/\/www.manageengine.com\/products\/passwordmanagerpro\/upgradepack.html\" target=\"_blank\" rel=\"noopener\">https:\/\/www.manageengine.com\/products\/passwordmanagerpro\/upgradepack.html<\/a><\/li>\n\n\n\n<li>ManageEngine SharePoint Manager Plus \u2014 build 4508:<br \/><a href=\"https:\/\/pitstop.manageengine.com\/portal\/en\/community\/topic\/sharepoint-manager-plus-build-4508-is-here\" target=\"_blank\" rel=\"noopener\">https:\/\/pitstop.manageengine.com\/portal\/en\/community\/topic\/sharepoint-manager-plus-build-4508-is-here<\/a><\/li>\n\n\n\n<li>ManageEngine SharePoint Manager Plus \u2014 build 4507:<br \/><a href=\"https:\/\/pitstop.manageengine.com\/portal\/en\/community\/topic\/sharepoint-manager-plus-build-4507-released\" target=\"_blank\" rel=\"noopener\">https:\/\/pitstop.manageengine.com\/portal\/en\/community\/topic\/sharepoint-manager-plus-build-4507-released<\/a><\/li>\n\n\n\n<li>CVE.org \u2014 CVE-2026-18199:<br \/><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-18199\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cve.org\/CVERecord?id=CVE-2026-18199<\/a><\/li>\n\n\n\n<li>CVE.org \u2014 CVE-2026-119680:<br \/><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-119680\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cve.org\/CVERecord?id=CVE-2026-119680<\/a><\/li>\n\n\n\n<li>CVE.org \u2014 CVE-2026-119682:<br \/><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-119682\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cve.org\/CVERecord?id=CVE-2026-119682<\/a><\/li>\n\n\n\n<li>CERT-PY \u2014 vulnerabilities in ManageEngine products:<br \/><a href=\"https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-manageengine-3\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.cert.gov.py\/vulnerabilidades-en-productos-manageengine-3\/<\/a><\/li>\n\n\n\n<li>cyberveille.esante.gouv.fr \u2014 alert on CVE-2026-18199:<br \/><a href=\"https:\/\/cyberveille.esante.gouv.fr\/alertes\/zohocorp-cve-2026-18199-2026-11-03\" target=\"_blank\" rel=\"noopener\">https:\/\/cyberveille.esante.gouv.fr\/alertes\/zohocorp-cve-2026-18199-2026-11-03<\/a><\/li>\n<\/ul>\n","protected":false},"featured_media":12374,"template":"","class_list":["post-12383","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"Three high-severity flaws in Password Manager Pro, PAM360 and SharePoint Manager Plus; the most severe allows command execution on the server. Update now.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"ManageEngine: high flaws in PAM360 and Password Manager Pro\" \/>\n\t\t<meta property=\"og:description\" content=\"Three high-severity flaws in Password Manager Pro, PAM360 and SharePoint Manager Plus; the most severe allows command execution on the server. Update now.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-manageengine-2026-139-1200x630-1.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-manageengine-2026-139-1200x630-1.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-11-03T21:24:47+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-11-03T21:25:30+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"ManageEngine: high flaws in PAM360 and Password Manager Pro\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Three high-severity flaws in Password Manager Pro, PAM360 and SharePoint Manager Plus; the most severe allows command execution on the server. Update now.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-manageengine-2026-139-1200x630-1.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/#listItem\",\"name\":\"Alert 2026-139 Vulnerabilities in ManageEngine Password Manager Pro, PAM360 and SharePoint Manager Plus\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/#listItem\",\"position\":2,\"name\":\"Alert 2026-139 Vulnerabilities in ManageEngine Password Manager Pro, PAM360 and SharePoint Manager Plus\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/\",\"name\":\"ManageEngine: high flaws in PAM360 and Password Manager Pro\",\"description\":\"Three high-severity flaws in Password Manager Pro, PAM360 and SharePoint Manager Plus; the most severe allows command execution on the server. Update now.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/manageengine-logo-destacada.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/#mainImage\",\"width\":600,\"height\":600},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\\\/#mainImage\"},\"datePublished\":\"2026-11-03T15:24:47-06:00\",\"dateModified\":\"2026-11-03T15:25:30-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"ManageEngine: high flaws in PAM360 and Password Manager Pro","description":"Three high-severity flaws in Password Manager Pro, PAM360 and SharePoint Manager Plus; the most severe allows command execution on the server. Update now.","canonical_url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/#listItem","name":"Alert 2026-139 Vulnerabilities in ManageEngine Password Manager Pro, PAM360 and SharePoint Manager Plus"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/#listItem","position":2,"name":"Alert 2026-139 Vulnerabilities in ManageEngine Password Manager Pro, PAM360 and SharePoint Manager Plus","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/en\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/en\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/#webpage","url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/","name":"ManageEngine: high flaws in PAM360 and Password Manager Pro","description":"Three high-severity flaws in Password Manager Pro, PAM360 and SharePoint Manager Plus; the most severe allows command execution on the server. Update now.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/beaconlab.us\/en\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/manageengine-logo-destacada.png","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/#mainImage","width":600,"height":600},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/#mainImage"},"datePublished":"2026-11-03T15:24:47-06:00","dateModified":"2026-11-03T15:25:30-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/en\/#website","url":"https:\/\/beaconlab.us\/en\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"en-US","publisher":{"@id":"https:\/\/beaconlab.us\/en\/#organization"}}]},"og:locale":"en_US","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"ManageEngine: high flaws in PAM360 and Password Manager Pro","og:description":"Three high-severity flaws in Password Manager Pro, PAM360 and SharePoint Manager Plus; the most severe allows command execution on the server. Update now.","og:url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-manageengine-2026-139-1200x630-1.png","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-manageengine-2026-139-1200x630-1.png","article:published_time":"2026-11-03T21:24:47+00:00","article:modified_time":"2026-11-03T21:25:30+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"ManageEngine: high flaws in PAM360 and Password Manager Pro","twitter:description":"Three high-severity flaws in Password Manager Pro, PAM360 and SharePoint Manager Plus; the most severe allows command execution on the server. Update now.","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-manageengine-2026-139-1200x630-1.png"},"aioseo_meta_data":{"post_id":"12383","title":"ManageEngine: high flaws in PAM360 and Password Manager Pro","description":"Three high-severity flaws in Password Manager Pro, PAM360 and SharePoint Manager Plus; the most severe allows command execution on the server. Update now.","keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"custom_image","og_image_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-manageengine-2026-139-1200x630-1.png","og_image_width":"0","og_image_height":"0","og_image_custom_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-manageengine-2026-139-1200x630-1.png","og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"custom_image","twitter_image_url":null,"twitter_image_custom_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/11\/og-manageengine-2026-139-1200x630-1.png","twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2026-11-03 21:25:30","updated":"2026-11-03 22:28:36","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/en\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlert 2026-139 Vulnerabilities in ManageEngine Password Manager Pro, PAM360 and SharePoint Manager Plus\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/en\/"},{"label":"Alert 2026-139 Vulnerabilities in ManageEngine Password Manager Pro, PAM360 and SharePoint Manager Plus","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-139-vulnerabilities-in-manageengine-password-manager-pro-pam360-and-sharepoint-manager-plus\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12383","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12383\/revisions"}],"predecessor-version":[{"id":12384,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12383\/revisions\/12384"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media\/12374"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media?parent=12383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}