{"id":"EM-20261112-TW6W","url":"https://cyber.eventmonitor.net/incident/EM-20261112-TW6W/critical-zohocorp-manageengine-assetexplorer-vulnerability-cve-2026-12507/","type":"cve","title":"Critical Zohocorp ManageEngine AssetExplorer Vulnerability (CVE-2026-12507)","subtitle":"CVE-2026-12507","subject":"CVE-2026-12507","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-12T09:32:50.000Z","firstSignal":"2026-11-12T07:16:46.750Z","lastSignal":"2026-11-12T09:32:50.000Z","updated":"2026-11-12T10:08:44.750Z","revision":1,"life":[{"status":"Born","at":"2026-11-12T09:32:50.000Z","why":"second independent source: C29 CIRCL Vulnerability-Lookup"},{"status":"Developing","at":"2026-11-12T09:32:50.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-12T07:16:46.750Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-12T09:32:50.000Z","what":"Born: second source, C29 CIRCL Vulnerability-Lookup. Page EM-20261112-TW6W created."}],"stages":[{"name":"Disclosed","at":"2026-11-12T07:16:46.750Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-12T07:16:46.750Z","detail":"CVSS 9.1"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-12T07:16:46.750Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-12507 (CVSS 9.1)","text":"Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12507"},{"at":"2026-11-12T09:32:50.000Z","source":"C29","sourceName":"CIRCL Vulnerability-Lookup","role":"Database","severity":2,"title":"GHSA-4cwf-239q-xjfq / CVE-2026-12507","text":"Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user…","url":"https://vulnerability.circl.lu/vuln/GHSA-4cwf-239q-xjfq"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-12T07:16:46.750","score":9.1,"severity":"CRITICAL","desc":"Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user…","product":"","seen":1794478124750},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}