Skip to content
OpenAdvisories
High · 7.1 CVE-2026-77777 EUVD-2026-115728GHSA-9c74-3mf8-v92c

Improper access control vulnerability

Published Nov 3, 2026 · Updated Nov 3, 2026 · Assigned by Zohocorp

Description

ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials.

Affected products

VendorProductAffectedFixed
Zohocorp ManageEngine Key Manager Plus < 7151 7151

References