# cve.now: Zohocorp

The newest entries naming Zohocorp as an affected vendor (up to 200), of 95 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-12266](https://cve.now/CVE-2026-12266.md): Authenticated Broken Access Control (CVSS 7.6)
- [CVE-2026-12574](https://cve.now/CVE-2026-12574.md): Server-Side HTML Injection (CVSS 8.1)
- [CVE-2026-12573](https://cve.now/CVE-2026-12573.md): Authenticated Command Injection (CVSS 8.8)
- [CVE-2026-12572](https://cve.now/CVE-2026-12572.md): SQL Injection (CVSS 7.2)
- [CVE-2026-95651](https://cve.now/CVE-2026-95651.md): Authentication Bypass (CVSS 7.5)
- [CVE-2026-95646](https://cve.now/CVE-2026-95646.md): Authenticated Command Injection (CVSS 8.0)
- [CVE-2026-77690](https://cve.now/CVE-2026-77690.md): Command injection vulnerability (CVSS 8.8)
- [CVE-2026-77779](https://cve.now/CVE-2026-77779.md): Improper access control vulnerability (CVSS 7.7)
- [CVE-2026-77691](https://cve.now/CVE-2026-77691.md): Command injection vulnerability (CVSS 8.1)
- [CVE-2026-77778](https://cve.now/CVE-2026-77778.md): Improper access control vulnerability (CVSS 7.1)
- [CVE-2026-77777](https://cve.now/CVE-2026-77777.md): Improper access control vulnerability (CVSS 7.1)
- [CVE-2026-16900](https://cve.now/CVE-2026-16900.md): Authentication Bypass (CVSS 7.5)
- [CVE-2026-13594](https://cve.now/CVE-2026-13594.md): Improper Access Control vulnerability (CVSS 9.1)
- [CVE-2026-77800](https://cve.now/CVE-2026-77800.md): Authentication bypass vulnerability (CVSS 7.7)
- [CVE-2026-77799](https://cve.now/CVE-2026-77799.md): Two-factor authentication bypass (CVSS 7.4)
- [CVE-2026-8923](https://cve.now/CVE-2026-8923.md): Remote Code Execution (CVSS 8.7)
- [CVE-2026-18199](https://cve.now/CVE-2026-18199.md): Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2026-14308](https://cve.now/CVE-2026-14308.md): Insufficient Signature Validation (CVSS 4.9)
- [CVE-2026-12265](https://cve.now/CVE-2026-12265.md): Authenticated Broken Access Control (CVSS 8.8)
- [CVE-2026-12264](https://cve.now/CVE-2026-12264.md): Authenticated Arbitrary File Write (CVSS 8.8)
- [CVE-2026-12267](https://cve.now/CVE-2026-12267.md): Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE (CVSS 7.2)
- [CVE-2026-12268](https://cve.now/CVE-2026-12268.md): Authenticated PowerShell Injection leads to RCE (CVSS 8.8)
- [CVE-2026-12269](https://cve.now/CVE-2026-12269.md): Authenticated File Write to RCE via keepalived in DDI Central (CVSS 8.8)
- [CVE-2026-92905](https://cve.now/CVE-2026-92905.md): Denial of Service Vulnerability (CVSS 5.3)
- [CVE-2026-86678](https://cve.now/CVE-2026-86678.md): Broken Authentication vulnerability (CVSS 8.8)
- [CVE-2026-86677](https://cve.now/CVE-2026-86677.md): Broken Authentication vulnerability (CVSS 8.8)
- [CVE-2026-86679](https://cve.now/CVE-2026-86679.md): Broken Access Control vulnerability (CVSS 7.1)
- [CVE-2026-86683](https://cve.now/CVE-2026-86683.md): Broken Authentication Vulnerability (CVSS 8.1)
- [CVE-2026-86681](https://cve.now/CVE-2026-86681.md): Broken Access Control vulnerability (CVSS 7.6)
- [CVE-2026-86708](https://cve.now/CVE-2026-86708.md): Sensitive data exposure (CVSS 10.0)
- [CVE-2026-19599](https://cve.now/CVE-2026-19599.md): Remote Code Execution vulnerability (CVSS 9.9)
- [CVE-2026-75825](https://cve.now/CVE-2026-75825.md): Authentication Bypass vulnerability (CVSS 8.8)
- [CVE-2026-76978](https://cve.now/CVE-2026-76978.md): Command Injection vulnerability (CVSS 8.8)
- [CVE-2026-76979](https://cve.now/CVE-2026-76979.md): XML Injection vulnerability (CVSS 7.7)
- [CVE-2026-76980](https://cve.now/CVE-2026-76980.md): Data Exposure vulnerability (CVSS 7.4)
- [CVE-2026-84787](https://cve.now/CVE-2026-84787.md): Privilege Escalation vulnerability (CVSS 8.1)
- [CVE-2026-84789](https://cve.now/CVE-2026-84789.md): Broken Access Control vulnerability (CVSS 7.1)
- [CVE-2026-84791](https://cve.now/CVE-2026-84791.md): Broken Access Control vulnerability (CVSS 7.1)
- [CVE-2026-15358](https://cve.now/CVE-2026-15358.md): Path Traversal Vulnerability (CVSS 7.5)
- [CVE-2026-14913](https://cve.now/CVE-2026-14913.md): SQL Injection vulnerability (CVSS 8.8)
- [CVE-2026-12370](https://cve.now/CVE-2026-12370.md): Remote Code Execution Vulnerability (CVSS 7.6)
- [CVE-2026-75791](https://cve.now/CVE-2026-75791.md): Authentication bypass vulnerability (CVSS 8.6)
- [CVE-2026-74849](https://cve.now/CVE-2026-74849.md): Remote code execution vulnerability (CVSS 9.8)
- [CVE-2026-18912](https://cve.now/CVE-2026-18912.md): ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticate (CVSS 7.7)
- [CVE-2026-18911](https://cve.now/CVE-2026-18911.md): ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send req (CVSS 7.5)
- [CVE-2026-77697](https://cve.now/CVE-2026-77697.md): Privilege Escalation (CVSS 6.3)
- [CVE-2026-85640](https://cve.now/CVE-2026-85640.md): Privilege Escalation (CVSS 6.3)
- [CVE-2026-77699](https://cve.now/CVE-2026-77699.md): Privilege Escalation (CVSS 5.0)
- [CVE-2026-77698](https://cve.now/CVE-2026-77698.md): Privilege Escalation (CVSS 5.7)
- [CVE-2026-14828](https://cve.now/CVE-2026-14828.md): Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 (CVSS 8.8)
- [CVE-2026-12263](https://cve.now/CVE-2026-12263.md): Authentication Bypass (CVSS 8.8)
- [CVE-2026-11840](https://cve.now/CVE-2026-11840.md): SQL Injection (CVSS 8.8)
- [CVE-2026-12571](https://cve.now/CVE-2026-12571.md): Authentication Bypass Leading to Account Takeover (CVSS 9.8)
- [CVE-2026-16053](https://cve.now/CVE-2026-16053.md): Path Traversal (CVSS 8.5)
- [CVE-2026-6516](https://cve.now/CVE-2026-6516.md): Remote Code Execution (CVSS 10.0)
- [CVE-2026-3183](https://cve.now/CVE-2026-3183.md): Multi Factor Auth Bypass (CVSS 7.1)
- [CVE-2026-3182](https://cve.now/CVE-2026-3182.md): Sensitive Data Exposure (CVSS 4.3)
- [CVE-2026-11374](https://cve.now/CVE-2026-11374.md): Account Takeover via Predictable SSO Ticket Generation (CVSS 9.0)
- [CVE-2026-8174](https://cve.now/CVE-2026-8174.md): Cross-site Request Forgery (CVSS 5.7)
- [CVE-2026-2740](https://cve.now/CVE-2026-2740.md): Remote Code Execution (CVSS 8.4)
- [CVE-2026-3324](https://cve.now/CVE-2026-3324.md): Authentication Bypass (CVSS 8.2)
- [CVE-2026-5785](https://cve.now/CVE-2026-5785.md): SQL Injection (CVSS 8.1)
- [CVE-2026-27655](https://cve.now/CVE-2026-27655.md): Stored XSS Vulnerability (CVSS 7.3)
- [CVE-2026-4108](https://cve.now/CVE-2026-4108.md): Stored XSS Vulnerability (CVSS 7.3)
- [CVE-2026-4107](https://cve.now/CVE-2026-4107.md): Stored XSS Vulnerability (CVSS 7.3)
- [CVE-2026-3880](https://cve.now/CVE-2026-3880.md): Stored XSS Vulnerability (CVSS 7.3)
- [CVE-2026-3879](https://cve.now/CVE-2026-3879.md): Stored XSS Vulnerability (CVSS 7.3)
- [CVE-2026-28703](https://cve.now/CVE-2026-28703.md): Stored XSS Vulnerability (CVSS 7.3)
- [CVE-2026-28756](https://cve.now/CVE-2026-28756.md): Stored XSS Vulnerability (CVSS 7.3)
- [CVE-2026-28754](https://cve.now/CVE-2026-28754.md): Stored XSS Vulnerability (CVSS 7.3)
- [CVE-2026-1367](https://cve.now/CVE-2026-1367.md): SQL Injection (CVSS 8.3)
- [CVE-2025-9226](https://cve.now/CVE-2025-9226.md): Stored XSS (CVSS 4.6)
- [CVE-2025-11669](https://cve.now/CVE-2025-11669.md): Broken Access Control (CVSS 8.1)
- [CVE-2025-11250](https://cve.now/CVE-2025-11250.md): Authentication Bypass (CVSS 9.1)
- [CVE-2025-9435](https://cve.now/CVE-2025-9435.md): Path Traversal (CVSS 5.5)
- [CVE-2025-9787](https://cve.now/CVE-2025-9787.md): Stored XSS (CVSS 6.1)
- [CVE-2025-11670](https://cve.now/CVE-2025-11670.md): NTLM Hash Exposure Vulnerability (CVSS 6.4)
- [CVE-2025-9227](https://cve.now/CVE-2025-9227.md): Stored XSS (CVSS 6.5)
- [CVE-2025-9223](https://cve.now/CVE-2025-9223.md): Command Injection (CVSS 8.8)
- [CVE-2025-8324](https://cve.now/CVE-2025-8324.md): SQL Injection (CVSS 9.8)
- [CVE-2025-7633](https://cve.now/CVE-2025-7633.md): Stored XSS (CVSS 7.3)
- [CVE-2025-7632](https://cve.now/CVE-2025-7632.md): Stored XSS (CVSS 7.3)
- [CVE-2025-7430](https://cve.now/CVE-2025-7430.md): Stored XSS (CVSS 7.3)
- [CVE-2025-7429](https://cve.now/CVE-2025-7429.md): Stored XSS (CVSS 7.3)
- [CVE-2025-5347](https://cve.now/CVE-2025-5347.md): Stored XSS (CVSS 6.3)
- [CVE-2025-5343](https://cve.now/CVE-2025-5343.md): Stored XSS (CVSS 6.3)
- [CVE-2025-5342](https://cve.now/CVE-2025-5342.md): Denial of Service (DoS) (CVSS 4.3)
- [CVE-2025-11248](https://cve.now/CVE-2025-11248.md): Sensitive Information Logged (CVSS 3.2)
- [CVE-2025-6239](https://cve.now/CVE-2025-6239.md): Information disclosure (CVSS 6.5)
- [CVE-2025-10020](https://cve.now/CVE-2025-10020.md): Command Injection (CVSS 8.5)
- [CVE-2025-9428](https://cve.now/CVE-2025-9428.md): SQL Injection (CVSS 8.3)
- [CVE-2025-7473](https://cve.now/CVE-2025-7473.md): XML Injection (CVSS 5.2)
- [CVE-2025-5496](https://cve.now/CVE-2025-5496.md): Arbitrary File Deletion (CVSS 3.3)
- [CVE-2025-5494](https://cve.now/CVE-2025-5494.md): Privilege Escalation (CVSS 3.9)
- [CVE-2025-1724](https://cve.now/CVE-2025-1724.md): Account Takeover (CVSS 7.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/zohocorp
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.