What is CVE-2026-16053?

CVE-2026-16053 is a high-severity vulnerability in Zohocorp Manageengine M365 Manager Plus, classified under Relative Path Traversal. CVSS score: 8.5/10. Published 2026-08-11.

How severe is CVE-2026-16053?

High severity. CVSS v3 base score is 8.5 out of 10.

Path Traversal in Zohocorp Manageengine M365 Manager Plus

CVE-2026-16053

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.

CVSS v3 metric

CVSS v3 base score 8.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H.

Affected products

Zohocorp Manageengine M365 Manager Plus — versions 0
Zohocorp Manageengine M365 Security Plus — versions 0

Weakness classification (CWE)

CWE-23 — Relative Path Traversal

References

0fc0942c-577d-436f-ae8e-945763c79b02

Frequently asked questions

What is CVE-2026-16053?: CVE-2026-16053 is a high-severity vulnerability in Zohocorp Manageengine M365 Manager Plus, classified under Relative Path Traversal. CVSS score: 8.5/10. Published 2026-08-11.
How severe is CVE-2026-16053?: High severity. CVSS v3 base score is 8.5 out of 10.