Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Zohocorp ManageEngine Key Manager Plus 7151 Clear all filters
TI-2026-84932 CVE-2026-77690 · GHSA-2qrc-pgx3-p26j

Command injection in ManageEngine Key Manager Plus

Priority MEDIUM 56

ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands throu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.15584 Published 2026-11-04 Fixed in 7151 CWE-78
TI-2026-84931 CVE-2026-77779 · GHSA-c5gr-wpjp-5jrv

Improper access control in ManageEngine Key Manager Plus exposes keys

Priority LOW 34

ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated low-privilege users to export keys outside their authorized scope.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00523 Published 2026-11-04 Fixed in 7151 CWE-1220