CVE-2026-28756Disclosure(zohocorp / manageengine_exchange_reporter_plus)

LOWCVSS 4.8 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report.

zohocorp CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.manageengine.com/products/exchange-reports/advisory/CVE-2026-28756.html

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

manageengine_exchange_reporter_plus

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Affected systems

Vendors

zohocorp

Products

manageengine_exchange_reporter_plus

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

CVE@CVEnew188d
Disclosure
CVE-2026-28756 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report. https://www.cve.org/CVERecord?id=CVE-2026-28756
Post summary
The text reports that ManageEngine Exchange Reporter Plus versions earlier than 5802 suffer from a stored XSS vulnerability, providing a link to the CVE record for more details.
00020192
57.6K followersView on X
Infoflowcloud@infoflowcloud188d
Disclosure
🚨*CVE* CVE-2026-28756 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report. https://www.cve.org/CVERecord?id=CVE-2026-28756 ----- Traducción: CVE-2026-28756 Zohocorp ManageEngine Exc… http://infoflow.cloud`
Post summary
The CVE-2026-28756 vulnerability is a stored XSS flaw affecting older versions of Zohocorp ManageEngine Exchange Reporter Plus before 5802, with no evidence of proof‑of‑concepts, exploits, or patches mentioned.
0000032
65 followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash188d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28756 - Stored XSS Vulnerability Intel Report: https://ift.tt/G1FV2tB
Post summary
The post alerts that CVE-2026-28756 is a stored XSS vulnerability, but it provides no evidence of PoC, exploit code, active exploitation, or patches.
0000049
281 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	zohocorp	manageengine_exchange_reporter_plus	-	-	-
App	zohocorp	manageengine_exchange_reporter_plus	5.8	-	-
App	zohocorp	manageengine_exchange_reporter_plus	5.8	-	-
App	zohocorp	manageengine_exchange_reporter_plus	5.8	-	-

Explore more

Back to dashboard zohocorp CVEs manageengine_exchange_reporter_plus vulnerabilities