CVE-2026-86679

Summary

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope.

Affected Software

Weaknesses

• CWE-20: CWE-20 Improper input validation

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86679.html

• ←Previous
• Next→