CVE-2026-12370
Last modified
CVE-2026-12370 is a high-severity vulnerability rated 7.6/10 on the CVSS scale. ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution..
Description
ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Zohocorp | ManageEngine OpManager | < 12.8.668 |
| Zohocorp | ManageEngine NetFlow Analyzer | < 12.8.668 |
| Zohocorp | ManageEngine Network Configuration Manager | < 12.8.668 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-12370?
How severe is CVE-2026-12370?
How do I fix CVE-2026-12370?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-123695The Security For WooCommerce WordPress plugin through 1.0.16…9.8
- CVE-2026-123696The Security For WooCommerce WordPress plugin through 1.0.16…7.5
- CVE-2026-123697The Security For WooCommerce WordPress plugin through 1.0.16…7.5
- CVE-2026-123698The Security For WooCommerce WordPress plugin through 1.0.16…5.3
- CVE-2026-123699The Security For WooCommerce WordPress plugin through 1.0.16…4.8
- CVE-2026-1237Vulnerable cross-model authorization in juju. If a charm's c…2.1
- CVE-2026-123700The Security For WooCommerce WordPress plugin through 1.0.16…7.5
- CVE-2026-123701The Security For WooCommerce WordPress plugin through 1.0.16…5.3
- CVE-2026-123702The Security For WooCommerce WordPress plugin through 1.0.16…6.5
- CVE-2026-123703The Security For WooCommerce WordPress plugin through 1.0.16…5.3
- CVE-2026-123704The Security For WooCommerce WordPress plugin through 1.0.16…5.3
- CVE-2026-123705The Security For WooCommerce WordPress plugin through 1.0.16…5.3
Are you affected by CVE-2026-12370?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST