CVE-2026-86708 — Sensitive data exposure
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager instal…
Published: 2026-09-23 · CVSS: 10.0 · CVSS 3.1
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7