CVE-2026-86681 — Broken Access Control vulnerability
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator…
Published: 2026-09-23 · CVSS: 7.6 · CVSS 3.1
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7