Hi there,

This security advisory is to let you know that an authenticated remote code execution vulnerability was identified in PAM360. The vulnerability has been addressed, and the issue does not exist in the fixed version.

CVE ID: CVE-2026-18199

Severity : High

Impact:
The remote code execution vulnerability allows an authenticated adversary to execute arbitrary operating-system commands.

Steps to Upgrade:

1. Download the latest upgrade pack from the following link

• PAM360 - https://www.manageengine.com/privileged-access-management/minor-upgrades.html

2. Apply the latest build to your existing product installation as per the upgrade pack instructions provided in the above links.

Please contact the product support for further details at the below mentioned email addresses: