CVE-2026-86679 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

EUVD-2026-85291

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings...

CVE-2026-86683 Broken Authentication Vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings...

CVE-2026-86683

ZohoCorp ManageEngine Applications Manager versions 182000 and below are vulnerable to a Broken Authentication issue. This flaw allows a low-privileged user to unauthorizedly modify the proxy settings . The vulnerability carries a CVSS v3.1 score of 8.1 (HIGH) , with potential impacts on confiden...

CVE-2026-86683 Broken Authentication Vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings...

EUVD-2026-85289

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope...

CVE-2026-86681 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope...

CVE-2026-86681 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope...

CVE-2026-86681

ZohoCorp ManageEngine Applications Manager versions 182200 and below are affected by a permissions validation issue (Broken Access Control). This vulnerability allows low-privileged users to execute administrator-configured MBean actions on monitors that are outside of their assigned scope. No sp...

CVE-2026-86708 Sensitive data exposure

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated...

CVE-2026-86708

ZohoCorp ManageEngine Applications Manager versions 182200 and below are vulnerable to the exposure of a Google Cloud service-account private key within the Applications Manager installer. This sensitive data exposure allows an unauthenticated attacker to impersonate the service account, potentia...

EUVD-2026-85288

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated...

CVE-2026-86708 Sensitive data exposure

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated...

PT-2026-97312

Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 182200 and earlier Description A permissions validation issue exists that allows low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope. MBeans...

CVE-2026-86708: Use of Hard-coded Cryptographic Key

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated...

PT-2026-97317

Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 182000 and earlier Description A low-privileged user can obtain an administrator API key, enabling them to execute actions with administrator-level privileges. Recommendations Update ManageEngine...

PT-2026-97319

Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 182000 and earlier Description A low-privileged user can modify the proxy settings of the application. Recommendations Update to a version later than 182000...

PT-2026-97316

Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 182000 and earlier Description A low-privileged user can execute unauthorized SQL commands, which may lead to the attainment of administrator privileges and remote code execution RCE, a process where ...

CVE-2026-86683: Improper Input Validation

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings...

CVE-2026-86677: Improper Neutralization of Special Elements used in an SQL Command

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...