CVE-2026-86708 — Sensitive data exposure

CVE-2026-86708

Sensitive data exposure PUBLISHED

Description (CNA)

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.

Affected (CNA)

Vendor / product	Versions
Zohocorp / ManageEngine Applications Manager	affected 0 before 182300

CWE

CWE-321

References

https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86708.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.