Skip to content
OpenAdvisories
High · 7.7 CVE-2026-77779 EUVD-2026-116756GHSA-c5gr-wpjp-5jrv

Improper access control vulnerability

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by Zohocorp

Description

ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated low-privilege users to export keys outside their authorized scope.

Affected products

VendorProductAffectedFixed
Zohocorp ManageEngine Key Manager Plus < 7151 7151

References