High · 7.7 CVE-2026-77800 EUVD-2026-115675GHSA-vxjg-c5j8-2q49

Authentication bypass vulnerability

Published Nov 3, 2026 · Updated Nov 4, 2026 · Assigned by Zohocorp

Vendor: Zohocorp Product: ManageEngine Key Manager Plus

Description

ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.

Affected products

Vendor	Product	Affected	Fixed
Zohocorp	ManageEngine Key Manager Plus	< 7151	7151

References

https://www.manageengine.com/key-manager/advisory/cve-2026-77800.html