CVE-2026-12370 — Remote Code Execution Vulnerability

CVE-2026-12370

Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution.

Affected (CNA)

Vendor / product	Versions
Zohocorp / ManageEngine OpManager	affected 0 before 12.8.668
Zohocorp / ManageEngine NetFlow Analyzer	affected 0 before 12.8.668
Zohocorp / ManageEngine Network Configuration Manager	affected 0 before 12.8.668

CWE

CWE-1336

References

https://www.manageengine.com/itom/advisory/cve-2026-12370.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.