CVE-2026-18911NVD

Description

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication.

Severity Level

HIGH (7.5)

Published Date

18/09/2026

Last Modified

18/09/2026

Exploitation Status

????

EPSS Score

1.06% (percentile 63.1%)

CVSS Base Metrics

CVSS v3 (3.1)

HIGH 7.5

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

Weaknesses (CWE)

CWE-20 - CWE-20 Improper input validation

Affected & Patched Versions

Product	Affected Versions	Patched Version
Zohocorp ManageEngine DataSecurity Plus	0 - < 6310	N/A

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.