Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-86678

Broken Authentication vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zohocorp

Description

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zohocorp ManageEngine Applications Manager

Default version status: unaffected

  • 0 to < 182100affected

References