Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2026-86681

Broken Access Control vulnerability

Description

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zohocorp ManageEngine Applications Manager

Default version status: unaffected

  • 0 to < 182300affected

References