# Remote Code Execution via NCM Configlet - CVE-2026-12370

This document addresses "**Remote Code Execution via NCM Configlet**" reported in the monitoring component of RMM Central.

**Severity:** High

**CVE ID:** CVE-2026-12370

**Affected version(s):** Build 10.5.02 and below

**Fixed version(s):** Build 10.5.11

**Fixed on:** August 6, 2026

## What was the problem?

There was a **Server-Side Template Injection (SSTI) vulnerability in Configlet processing** that could potentially lead to remote code execution (RCE). This issue has now been fixed.

## Impact of the Vulnerability

A **Remote Code Execution (RCE) vulnerability on a server** allows an unauthorized attacker to execute arbitrary commands or code with the privileges of the vulnerable application or server process.

## Credits and acknowledgments

This vulnerability was reported by **C & N.**

## How do I fix it?

This vulnerability has been fixed on **August 6, 2026** and the mitigation is available in build **10.5.11** with monitoring build **12.9.108.**

Apply the latest build to your existing product installation as per the upgrade pack instructions provided in the service pack page.

[https://www.manageengine.com/remote-monitoring-management/service-packs.html](https://www.manageengine.com/remote-monitoring-management/service-packs.html)

## Help

For any further questions or concerns, please reach out to us at [rmmcentral-support@manageengine.com](mailto:rmmcentral-support@manageengine.com)