CVE-2026-19599: Remote Code Execution vulnerability
Published Sep 23, 2026
·Updated
ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module.
Affected Software
1 affected component
Zohocorp Manageengine Opmanager Msp<=12.8.709
Event History
Sep 23, 2026
CVE Published
via MITRE·12:41 PM
Data Sourced
via MITRE·12:41 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below are affected.
2
What level of access does an attacker need?
The vulnerability is rated with low privileges required, so an attacker needs an account or access level with limited privileges. No user interaction is required.
3
What is the likely impact of successful exploitation?
Successful exploitation can result in remote code execution through OS command injection in the Notification Profile module. The reported severity metrics indicate high impact to confidentiality, integrity, and availability, including impact beyond the vulnerable component.