Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-86708 EUVD-2026-85288GHSA-pwgq-mrvp-r2v7

Sensitive data exposure

Published Sep 23, 2026 · Updated Sep 24, 2026 · Assigned by Zohocorp

Description

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.

Affected products

VendorProductAffectedFixed
Zohocorp ManageEngine Applications Manager < 182300 182300

References