[CVE-2026-86681] ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permission…

Descripción técnica

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope.

Puntuación CVSS

Score: 7.6/10 — Severidad: HIGH — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Debilidades (CWE)

CWE-306

Fuente oficial

Publicado en NIST NVD.