What is CVE-2026-12263?

CVE-2026-12263 is a high-severity vulnerability in Zohocorp Manageengine Pam360, classified under Improper Verification of Cryptographic Signature. CVSS score: 8.8/10. Published 2026-08-13.

How severe is CVE-2026-12263?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Zohocorp Manageengine Pam360

CVE-2026-12263

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Zohocorp Manageengine Pam360 — versions 0
Zohocorp Manageengine Password Manager Pro — versions 0

Weakness classification (CWE)

CWE-347 — Improper Verification of Cryptographic Signature

References

0fc0942c-577d-436f-ae8e-945763c79b02

Frequently asked questions

What is CVE-2026-12263?: CVE-2026-12263 is a high-severity vulnerability in Zohocorp Manageengine Pam360, classified under Improper Verification of Cryptographic Signature. CVSS score: 8.8/10. Published 2026-08-13.
How severe is CVE-2026-12263?: High severity. CVSS v3 base score is 8.8 out of 10.