CVE-2026-86681 — Broken Access Control vulnerability

CVE-2026-86681

Broken Access Control vulnerability PUBLISHED

Description (CNA)

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope.

Affected (CNA)

Vendor / product	Versions
Zohocorp / ManageEngine Applications Manager	affected 0 before 182300

CWE

CWE-306

References

https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86681.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.