CVE-2026-86677 — Broken Authentication vulnerability

CVE-2026-86677

Broken Authentication vulnerability PUBLISHED

Description (CNA)

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution.

Affected (CNA)

Vendor / product	Versions
Zohocorp / ManageEngine Applications Manager	affected 0 before 182100

CWE

CWE-89

References

https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86677.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.