Description
ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution.
Published: 2026-09-23
Score: 7.6 High
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is a server‑side template injection in Configlet processing that allows an attacker to execute arbitrary code on the host, compromising confidentiality, integrity, and availability of the affected systems.

Affected Systems

Zohocorp’s ManageEngine products—NetFlow Analyzer, Network Configuration Manager, and OpManager—are impacted when running version 12.8.667 or earlier.

Risk and Exploitability

The CVSS score of 7.6 indicates high severity, but the EPSS score is unavailable, so the likelihood of exploitation is uncertain. Because the flaw occurs during Configlet processing, the likely attack vector is remote via crafted requests to the application’s template engine.

Generated by OpenCVE AI on September 23, 2026 at 13:27 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest patch for ManageEngine NetFlow Analyzer, Network Configuration Manager, and OpManager that versions above 12.8.667.
  • Restrict access to Configlet processing endpoints to privileged users only and consider disabling the functionality if it is not required.
  • Enforce least‑privilege on accounts that submit Configlets and monitor for anomalous template usage in logs.

Generated by OpenCVE AI on September 23, 2026 at 13:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 23 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 23 Sep 2026 11:45:00 +0000

Type Values Removed Values Added
Description ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution.
Title Remote Code Execution Vulnerability
First Time appeared Zohocorp
Zohocorp manageengine Netflow Analyzer
Zohocorp manageengine Network Configuration Manager
Zohocorp manageengine Opmanager
Weaknesses CWE-1336
CPEs cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:*:*:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:*
Vendors & Products Zohocorp
Zohocorp manageengine Netflow Analyzer
Zohocorp manageengine Network Configuration Manager
Zohocorp manageengine Opmanager
References
Metrics cvssV3_1

{'score': 7.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L'}

Subscriptions

Zohocorp Manageengine Netflow Analyzer Manageengine Network Configuration Manager Manageengine Opmanager
cve-icon MITRE

Status: PUBLISHED

Assigner: Zohocorp

Published:

Updated: 2026-09-23T12:59:12.952Z

Reserved: 2026-06-16T05:07:06.783Z

Link: CVE-2026-12370

cve-icon Vulnrichment

Updated: 2026-09-23T12:59:00.973Z

cve-icon NVD

Status : Received

Published: 2026-09-23T12:17:05.373

Modified: 2026-09-23T13:17:26.177

Link: CVE-2026-12370

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-23T13:30:05Z

Weaknesses
  • CWE-1336

    Improper Neutralization of Special Elements Used in a Template Engine