ManageEngine (PAM360, Password Manager Pro, and others) Family January 2026 Security Update Advisory

Overview

 

Zoho(https://www.zohocorp.com/) has released a security update that addresses a vulnerability in its ManageEngine suite of products. users of affected products are advised to update to the latest version.

 

Affected Products

 

PAM360 up to version 8201

Password Manager Pro versions up to and including 13220

Access Manager Plus versions up to 4400

 

Resolved Vulnerabilities

 

High Impact Privilege Disallowance Vulnerability in PAM360 (CVE-2025-11669) [1]

High impact privilege escalation vulnerability in Password Manager Pro (CVE-2025-11669) [1]

High Impact Privilege Disallowance Vulnerability in Access Manager Plus (CVE-2025-11669) [1]

 

Vulnerability Patches

 

Please follow the security advisory published on January 13 to update to the applicable version and the latest version.

PAM360 build-8202 version

Password Manager Pro build – 13221

Access Manager Plus build-4401

 

Referenced Sites

 

[1] CVE-2025-11669 – Missing Authorization Vulnerability

https://www.manageengine.com/privileged-access-management/advisory/cve-2025-11669.html