CVE-2026-86681

Summary

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope.

Affected Software

Weaknesses

• CWE-306: CWE-306 Missing authentication for critical function

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86681.html

• ←Previous
• Next→