Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-16900

Authentication Bypass

Description

Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zohocorp Log360

Default version status: unaffected

  • 0 to < 13071affected

Zohocorp EventLog Analyzer

Default version status: unaffected

  • 0 to < 13071affected

References