Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector…
Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Zohocorp
- Product
- Log360, EventLog Analyzer
- CVSS v3.1
- 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weakness
- CWE-284
- Exposure class
- Identity
- NVD status
- Received
Why it ranks 37 (Notable)
- CVSS v3.1 7.5 high
- Exposed product class: identity
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-16900 on this site · NVD · CVE.org · Vulnpedia