CVE-2026-86678 | BDVDB-2026-378232 Detail
ZohocorpManageEngine Applications Manager
Description#
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions.
Impact#
CAPEC-122 Privilege Abuse
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.