CVE-2026-86681

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope.

Score

CVSS 3.1 7.6 High

Status

Awaiting Analysis - 0fc0942c-577d-436f-ae8e-945763c79b02

Published

2026-09-23

Last modified

2026-09-23

Weaknesses

CWE-306

Affected products

• Manageengine Applications Manager (Zohocorp)

References

• https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86681.html