Skip to content
OpenAdvisories
High · 7.4 CVE-2026-77799 EUVD-2026-115674GHSA-7g56-c8wh-g2wc

Two-factor authentication bypass

Published Nov 3, 2026 · Updated Nov 4, 2026 · Assigned by Zohocorp

Description

ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code.

Affected products

VendorProductAffectedFixed
Zohocorp ManageEngine Key Manager Plus < 7151 7151

References