CVE-2026-77777

ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue (CWE-1220). This flaw allows authenticated users to modify the ACME certificate deployment credentials belonging to another user. The vulnerability is associated with a CVSS 3.1 score of 7.1 (Hig...