CVE-2026-86679 — Broken Access Control vulnerability

CVE-2026-86679

Broken Access Control vulnerability PUBLISHED

Description (CNA)

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope.

Affected (CNA)

Vendor / product	Versions
Zohocorp / ManageEngine Applications Manager	affected 0 before 182100

CWE

CWE-20

References

https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86679.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.