Agent Authentication Bypass in ManageEngine DataSecurity Plus
CVE-2026-18911

7.5HIGH

Key Information:

Vendor

Zohocorp
Status
Manageengine Datasecurity Plus
Vendor
CVE Published:
18 September 2026

What is CVE-2026-18911?

The agent authentication bypass vulnerability in ManageEngine DataSecurity Plus allows unauthorized agents to send requests without proper authentication, potentially compromising sensitive data. Versions prior to 6310 are affected, making systems susceptible to unauthorized access and data integrity issues. This flaw emphasizes the importance of regular updates and stringent security measures.

Affected Version(s)

ManageEngine DataSecurity Plus 0 < 6310

References

https://www.manageengine.com/data-security/cve-2026-18911...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.