{"api_version":"1","generated_at":"2026-11-12T12:53:28+00:00","cve":"CVE-2026-12507","urls":{"html":"https://cve.report/CVE-2026-12507","api":"https://cve.report/api/cve/CVE-2026-12507.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-12507","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-12507"},"summary":{"title":"Authenticated remote code execution","description":"Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.","state":"PUBLISHED","assigner":"Zohocorp","published_at":"2026-11-12 07:16:46","updated_at":"2026-11-12 07:16:46"},"problem_types":["CWE-89","CWE-89 CWE-89 – SQL Injection"],"metrics":[{"version":"3.1","source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","score":"9.1","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"9.1","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://www.manageengine.com/products/service-desk/cve-2026-12507.html","name":"https://www.manageengine.com/products/service-desk/cve-2026-12507.html","refsource":"0fc0942c-577d-436f-ae8e-945763c79b02","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-12507","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12507","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Zohocorp","product":"AssetExplorer","version":"affected 7860 custom","platforms":[]},{"source":"CNA","vendor":"Zohocorp","product":"ServiceDesk Plus","version":"affected 15290 custom","platforms":[]},{"source":"CNA","vendor":"Zohocorp","product":"ServiceDesk Plus MSP","version":"affected 15150 custom","platforms":[]},{"source":"CNA","vendor":"Zohocorp","product":"SupportCenter Plus","version":"affected 15150 custom","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"AssetExplorer","vendor":"Zohocorp","versions":[{"lessThan":"7860","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"ServiceDesk Plus","vendor":"Zohocorp","versions":[{"lessThan":"15290","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"ServiceDesk Plus MSP","vendor":"Zohocorp","versions":[{"lessThan":"15150","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"SupportCenter Plus","vendor":"Zohocorp","versions":[{"lessThan":"15150","status":"affected","version":"0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:zohocorp:assetexplorer:*:*:*:*:*:*:*:*","versionEndExcluding":"7860","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:zohocorp:servicedesk_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"15290","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:zohocorp:servicedesk_plus_msp:*:*:*:*:*:*:*:*","versionEndExcluding":"15150","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:zohocorp:supportcenter_plus:*:*:*:*:*:*:*:*","versionEndExcluding":"15150","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span>Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the </span><span><span>Create Query Reports</span></span><span> permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.</span>"}],"value":"Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server."}],"impacts":[{"capecId":"CAPEC-242","descriptions":[{"lang":"en","value":"CAPEC-242 – Code Injection"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","description":"CWE-89 – SQL Injection","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-12T06:48:54.703Z","orgId":"0fc0942c-577d-436f-ae8e-945763c79b02","shortName":"Zohocorp"},"references":[{"url":"https://www.manageengine.com/products/service-desk/cve-2026-12507.html"}],"source":{"discovery":"UNKNOWN"},"title":"Authenticated remote code execution","x_generator":{"engine":"Vulnogram 1.0.5"}}},"cveMetadata":{"assignerOrgId":"0fc0942c-577d-436f-ae8e-945763c79b02","assignerShortName":"Zohocorp","cveId":"CVE-2026-12507","datePublished":"2026-11-12T06:48:54.703Z","dateReserved":"2026-06-17T10:49:52.198Z","dateUpdated":"2026-11-12T06:48:54.703Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-12 07:16:46","lastModifiedDate":"2026-11-12 07:16:46","problem_types":["CWE-89","CWE-89 CWE-89 – SQL Injection"],"metrics":{"cvssMetricV31":[{"source":"0fc0942c-577d-436f-ae8e-945763c79b02","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"12507","Ordinal":"1","Title":"Authenticated remote code execution","CVE":"CVE-2026-12507","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"12507","Ordinal":"1","NoteData":"Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.","Type":"Description","Title":"Authenticated remote code execution"}]}}}