High severity7.6NVD Advisory· Published Sep 23, 2026· Updated Sep 23, 2026

CVE-2026-12370

Description

ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zohocorp/Manageengine Network Configuration Managerllm-fuzzy
Range: <=12.8.667
Zohocorp/Manageengine Opmanagerllm-fuzzy
Range: <=12.8.667
Zohocorp/Manageengine Netflow Analyzerllm-fuzzy
Range: <=12.8.667

Patches

Vulnerability mechanics

References

www.manageengine.com/itom/advisory/cve-2026-12370.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000