Skip to content
OpenAdvisories
High · 7.1 CVE-2026-77778 EUVD-2026-115732GHSA-jhqj-68fm-5856

Improper access control vulnerability

Published Nov 3, 2026 · Updated Nov 3, 2026 · Assigned by Zohocorp

Description

ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.

Affected products

VendorProductAffectedFixed
Zohocorp ManageEngine Key Manager Plus < 7151 7151

References