What is CVE-2026-13594?

CVE-2026-13594 is a critical-severity vulnerability in Zohocorp Eventlog Analyzer, classified under Improper Access Control. CVSS score: 9.1/10. Published 2026-11-03.

How severe is CVE-2026-13594?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Zohocorp Eventlog Analyzer

CVE-2026-13594

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Published 2026-11-03 · last modified 2026-11-04.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

EPSS exploit prediction

EPSS: 0.011 (66.7th percentile), scored 2026-11-04.

Low probability of exploitation in the next 30 days, but still tracked. 67th percentile — 66.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

The 30-day trend appears once there are two daily scores.

Affected products

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

0fc0942c-577d-436f-ae8e-945763c79b02

Frequently asked questions

What is CVE-2026-13594?: CVE-2026-13594 is a critical-severity vulnerability in Zohocorp Eventlog Analyzer, classified under Improper Access Control. CVSS score: 9.1/10. Published 2026-11-03.
How severe is CVE-2026-13594?: Critical severity. CVSS v3 base score is 9.1 out of 10.