https://vulnogram.org/ Most recent CVEs assigned by Zohocorp (zohocorp). https://vulnogram.org/seaview/icons/zohocorp.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-14308 https://vulnogram.org/CVE-2026-14308 Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService. Medium Tue, 13 Oct 2026 07:51:58 GMT https://vulnogram.org/CVE-2026-12265 https://vulnogram.org/CVE-2026-12265 Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations. High Mon, 28 Sep 2026 12:22:02 GMT https://vulnogram.org/CVE-2026-12264 https://vulnogram.org/CVE-2026-12264 Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution. High Mon, 28 Sep 2026 11:51:50 GMT https://vulnogram.org/CVE-2026-12267 https://vulnogram.org/CVE-2026-12267 ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution. High Mon, 28 Sep 2026 11:00:04 GMT https://vulnogram.org/CVE-2026-12268 https://vulnogram.org/CVE-2026-12268 ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution. High Mon, 28 Sep 2026 10:51:40 GMT https://vulnogram.org/CVE-2026-12269 https://vulnogram.org/CVE-2026-12269 Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and p… High Mon, 28 Sep 2026 10:37:52 GMT https://vulnogram.org/CVE-2026-92905 https://vulnogram.org/CVE-2026-92905 ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets. Medium Network Exploitable Thu, 24 Sep 2026 09:10:29 GMT https://vulnogram.org/CVE-2026-86678 https://vulnogram.org/CVE-2026-86678 ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions. High Wed, 23 Sep 2026 13:41:27 GMT https://vulnogram.org/CVE-2026-86677 https://vulnogram.org/CVE-2026-86677 ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution. High Wed, 23 Sep 2026 13:36:03 GMT https://vulnogram.org/CVE-2026-86679 https://vulnogram.org/CVE-2026-86679 ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope. High Wed, 23 Sep 2026 13:29:51 GMT https://vulnogram.org/CVE-2026-86683 https://vulnogram.org/CVE-2026-86683 ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings. High Wed, 23 Sep 2026 13:23:58 GMT https://vulnogram.org/CVE-2026-86681 https://vulnogram.org/CVE-2026-86681 ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope. High Wed, 23 Sep 2026 13:17:16 GMT https://vulnogram.org/CVE-2026-86708 https://vulnogram.org/CVE-2026-86708 ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the ser… Critical Network Exploitable Wed, 23 Sep 2026 13:11:31 GMT https://vulnogram.org/CVE-2026-19599 https://vulnogram.org/CVE-2026-19599 ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module. Critical Wed, 23 Sep 2026 12:41:25 GMT https://vulnogram.org/CVE-2026-75825 https://vulnogram.org/CVE-2026-75825 ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass vulnerability. High Wed, 23 Sep 2026 12:35:00 GMT https://vulnogram.org/CVE-2026-76978 https://vulnogram.org/CVE-2026-76978 ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose Settings feature. High Wed, 23 Sep 2026 12:28:35 GMT https://vulnogram.org/CVE-2026-76979 https://vulnogram.org/CVE-2026-76979 ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature. High Wed, 23 Sep 2026 12:22:49 GMT https://vulnogram.org/CVE-2026-76980 https://vulnogram.org/CVE-2026-76980 ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer syslog collector. High Wed, 23 Sep 2026 12:08:24 GMT https://vulnogram.org/CVE-2026-84787 https://vulnogram.org/CVE-2026-84787 ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an authenticated low-privilege user to gain Administrator privileges through Report Profile import. High Wed, 23 Sep 2026 11:57:33 GMT https://vulnogram.org/CVE-2026-84789 https://vulnogram.org/CVE-2026-84789 ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to create alert notifications for firewalls outside their assi… High Wed, 23 Sep 2026 11:51:43 GMT https://vulnogram.org/CVE-2026-84791 https://vulnogram.org/CVE-2026-84791 ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to modify Change Management report schedule configurations for… High Wed, 23 Sep 2026 11:45:33 GMT https://vulnogram.org/CVE-2026-15358 https://vulnogram.org/CVE-2026-15358 ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability. High Network Exploitable Wed, 23 Sep 2026 11:36:25 GMT https://vulnogram.org/CVE-2026-14913 https://vulnogram.org/CVE-2026-14913 ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search Reports. High Wed, 23 Sep 2026 11:28:25 GMT https://vulnogram.org/CVE-2026-12370 https://vulnogram.org/CVE-2026-12370 ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template Injection vulnerability in Configlet processing, which could lead to Remote Code Execution. High Wed, 23 Sep 2026 11:20:09 GMT https://vulnogram.org/CVE-2026-75791 https://vulnogram.org/CVE-2026-75791 Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API. High Network Exploitable Tue, 22 Sep 2026 12:03:31 GMT https://vulnogram.org/CVE-2026-74849 https://vulnogram.org/CVE-2026-74849 Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client. Critical Network Exploitable Tue, 22 Sep 2026 11:55:32 GMT https://vulnogram.org/CVE-2026-18912 https://vulnogram.org/CVE-2026-18912 ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL queries through the Reports module. High Fri, 18 Sep 2026 05:41:18 GMT https://vulnogram.org/CVE-2026-18911 https://vulnogram.org/CVE-2026-18911 ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication. High Network Exploitable Fri, 18 Sep 2026 05:37:32 GMT https://vulnogram.org/CVE-2026-77697 https://vulnogram.org/CVE-2026-77697 Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction Medium Mon, 07 Sep 2026 10:49:52 GMT https://vulnogram.org/CVE-2026-85640 https://vulnogram.org/CVE-2026-85640 Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component Medium Mon, 07 Sep 2026 10:45:14 GMT https://vulnogram.org/CVE-2026-77699 https://vulnogram.org/CVE-2026-77699 Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path. Medium Mon, 07 Sep 2026 10:30:16 GMT https://vulnogram.org/CVE-2026-77698 https://vulnogram.org/CVE-2026-77698 Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade. Medium Mon, 07 Sep 2026 09:51:04 GMT https://vulnogram.org/CVE-2026-14828 https://vulnogram.org/CVE-2026-14828 Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerability. High Wed, 02 Sep 2026 07:25:47 GMT https://vulnogram.org/CVE-2026-12263 https://vulnogram.org/CVE-2026-12263 Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation. High Thu, 13 Aug 2026 10:18:35 GMT https://vulnogram.org/CVE-2026-11840 https://vulnogram.org/CVE-2026-11840 Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection. High Thu, 13 Aug 2026 07:35:28 GMT https://vulnogram.org/CVE-2026-12571 https://vulnogram.org/CVE-2026-12571 An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover. Critical Network Exploitable Tue, 11 Aug 2026 16:52:14 GMT https://vulnogram.org/CVE-2026-16053 https://vulnogram.org/CVE-2026-16053 Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module. High Tue, 11 Aug 2026 06:36:22 GMT https://vulnogram.org/CVE-2026-6516 https://vulnogram.org/CVE-2026-6516 Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API. Critical Network Exploitable Thu, 23 Jul 2026 17:22:26 GMT https://vulnogram.org/CVE-2026-3183 https://vulnogram.org/CVE-2026-3183 Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass. High Tue, 21 Jul 2026 06:58:53 GMT https://vulnogram.org/CVE-2026-3182 https://vulnogram.org/CVE-2026-3182 Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability. Medium Tue, 21 Jul 2026 05:30:33 GMT https://vulnogram.org/CVE-2026-11374 https://vulnogram.org/CVE-2026-11374 In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover. Critical Network Exploitable Tue, 23 Jun 2026 08:19:30 GMT https://vulnogram.org/CVE-2026-8174 https://vulnogram.org/CVE-2026-8174 Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF). This issue affects Zoho Mail wordpress plugin versions before 1.6.2. Medium Tue, 26 May 2026 11:04:44 GMT https://vulnogram.org/CVE-2026-2740 https://vulnogram.org/CVE-2026-2740 Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code execution in the agent machines due to the bug in the 3rd party dependency. High Thu, 21 May 2026 12:36:17 GMT https://vulnogram.org/CVE-2026-3324 https://vulnogram.org/CVE-2026-3324 Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration. High Network Exploitable Thu, 16 Apr 2026 14:30:55 GMT https://vulnogram.org/CVE-2026-5785 https://vulnogram.org/CVE-2026-5785 Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module. High Thu, 16 Apr 2026 13:46:28 GMT https://vulnogram.org/CVE-2026-27655 https://vulnogram.org/CVE-2026-27655 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report. High Fri, 03 Apr 2026 12:23:01 GMT https://vulnogram.org/CVE-2026-4108 https://vulnogram.org/CVE-2026-4108 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report. High Fri, 03 Apr 2026 11:47:38 GMT https://vulnogram.org/CVE-2026-4107 https://vulnogram.org/CVE-2026-4107 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report. High Fri, 03 Apr 2026 11:44:46 GMT https://vulnogram.org/CVE-2026-3880 https://vulnogram.org/CVE-2026-3880 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report. High Fri, 03 Apr 2026 11:41:24 GMT https://vulnogram.org/CVE-2026-3879 https://vulnogram.org/CVE-2026-3879 Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Details report. High Fri, 03 Apr 2026 11:33:33 GMT