Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

4 matching records.

1. 39
   CVE NVD 41h ago

   An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SharePoint Manager Plus (SPMP).

   An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SharePoint Manager Plus (SPMP). A low-privileged authenticated user can bypass authorization checks to read…

   CVSS 7.9 Fix available CVE-2026-119682 Zoho / ManageEngine Collaboration
2. 39
   CVE NVD 41h ago

   A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper sanitization and HTML…

   A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or…

   CVSS 8.5 Fix available CVE-2026-119680 Zoho / ManageEngine Collaboration
3. 36
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

   Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

   CVSS 9.8 CVE-2026-62131 Zoho / ManageEngine Identity
4. 15
   CVE NVD 19d ago

   Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.

   Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.

   CVSS 4.9 CVE-2026-14308 Zoho / ManageEngine Identity

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Zoho+%2F+ManageEngine&limit=100. RSS for this section: feed.xml.