Zohocorp

Latest CVEs · RSS

• CVE-2026-14308 2026-10-13 · CVSS 4.9
  Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.
• CVE-2026-12265 2026-09-28 · CVSS 8.8
  Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL d
• CVE-2026-12264 2026-09-28 · CVSS 8.8
  Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code executio
• CVE-2026-12267 2026-09-28 · CVSS 7.2
  ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execut
• CVE-2026-12268 2026-09-28 · CVSS 8.8
  ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.
• CVE-2026-12269 2026-09-28 · CVSS 8.8
  Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue cou
• CVE-2026-92905 2026-09-24 · CVSS 5.3
  ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector u
• CVE-2026-86678 2026-09-23 · CVSS 8.8
  ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform ad
• CVE-2026-86677 2026-09-23 · CVSS 8.8
  ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining adminis
• CVE-2026-86679 2026-09-23 · CVSS 7.1
  ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to del
• CVE-2026-86683 2026-09-23 · CVSS 8.1
  ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings.
• CVE-2026-86681 2026-09-23 · CVSS 7.6
  ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to exec
• CVE-2026-86708 2026-09-23 · CVSS 10.0
  ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applicatio
• CVE-2026-19599 2026-09-23 · CVSS 9.9
  ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module.
• CVE-2026-75825 2026-09-23 · CVSS 8.8
  ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerabilit
• CVE-2026-76978 2026-09-23 · CVSS 8.8
  ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings
• CVE-2026-76979 2026-09-23 · CVSS 7.7
  ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare
• CVE-2026-76980 2026-09-23 · CVSS 7.4
  ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer sysl
• CVE-2026-84787 2026-09-23 · CVSS 8.1
  ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authen
• CVE-2026-84789 2026-09-23 · CVSS 7.1
  ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authe
• CVE-2026-84791 2026-09-23 · CVSS 7.1
  ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authe
• CVE-2026-15358 2026-09-23 · CVSS 7.5
  ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability.
• CVE-2026-14913 2026-09-23 · CVSS 8.8
  ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Re
• CVE-2026-12370 2026-09-23 · CVSS 7.6
  ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injec
• CVE-2026-75791 2026-09-22 · CVSS 8.6
  Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API.