Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-13594 EUVD-2026-115725GHSA-q9rp-676h-9hq2

Improper Access Control vulnerability

Published Nov 3, 2026 · Updated Nov 4, 2026 · Assigned by Zohocorp

Description

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Affected products

VendorProductAffectedFixed
Zohocorp Log360 < 13062 13062
Zohocorp EventLog Analyzer < 13062 13062

References