CVE-2026-18912
HIGH
NVD
CVSS Score
7.7
Severity
HIGH
Published
Sep 18, 2026
Vendor
unknown
Description
ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL queries through the Reports module.