CVE-2026-77779

ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated low-privilege users to export keys outside their authorized scope...

CVE-2026-77690

ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands through specially crafted input when configuring a deployment target...

CVE-2026-77690 Command injection vulnerability

ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands through specially crafted input when configuring a deployment target...

CVE-2026-77690

ZohoCorp ManageEngine Key Manager Plus versions before 7151 are vulnerable to a Command Injection vulnerability (CWE-78). This flaw allows authenticated users with certificate deployment privileges to execute arbitrary commands by providing specially crafted input while configuring a deployment t...

EUVD-2026-116757

ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands through specially crafted input when configuring a deployment target...

EUVD-2026-116756

ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated low-privilege users to export keys outside their authorized scope...

CVE-2026-77779 Improper access control vulnerability

ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated low-privilege users to export keys outside their authorized scope...

CVE-2026-77779

ManageEngine Key Manager Plus versions prior to 7151 are affected by an Improper Access Control vulnerability (CWE-1220). This flaw allows authenticated low-privilege users to export cryptographic keys outside of their authorized scope, potentially leading to unauthorized data access. Exploitatio...

PT-2026-136839

Name of the Vulnerable Software and Affected Versions ManageEngine Key Manager Plus versions prior to 7151 Description Authenticated users with certificate deployment privileges can execute arbitrary commands through specially crafted input when configuring a deployment target. This occurs due to...

CVE-2026-77778

ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults...

CVE-2026-77777

ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials...

CVE-2026-77691

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA...

EUVD-2026-115735

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA...

CVE-2026-77691

ZohoCorp ManageEngine Key Manager Plus versions prior to 7151 are vulnerable to an OS Command Injection (CWE-78) flaw. The vulnerability occurs because the application allows authenticated users to submit malicious input during the configuration of a Microsoft CA . Successful exploitation could l...

CVE-2026-77691 Command injection vulnerability

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA...

CVE-2026-77778 Improper access control vulnerability

ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults...

CVE-2026-77778

ZohoCorp ManageEngine Key Manager Plus versions up to 7150 are vulnerable to an improper access control flaw (CWE-1220). This vulnerability allows authenticated users to export certificates belonging to other users into their own registered key vaults. The CVSS 3.1 base score is 7.1 (HIGH) , with...

EUVD-2026-115732

ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults...

CVE-2026-77777 Improper access control vulnerability

ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials...

CVE-2026-77777

ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue (CWE-1220). This flaw allows authenticated users to modify the ACME certificate deployment credentials belonging to another user. The vulnerability is associated with a CVSS 3.1 score of 7.1 (Hig...