Critical severity9.1NVD Advisory· Published Nov 12, 2026
CVE-2026-12507
CVE-2026-12507
Description
Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5<15150+ 1 more
- (no CPE)range: <15150
- (no CPE)range: <15150
- Range: <7860
- Range: <15290
- Range: <15150
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.