Zohocorp Manageengine Key Manager Plus
5 CVEs affecting Zohocorp Manageengine Key Manager Plus. Latest disclosed: 2026-11-03. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77691 | High | 8.1 | 2026-11-03 | ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA |
CVE-2026-77800 | High | 7.7 | 2026-11-03 | ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant f… |
CVE-2026-77799 | High | 7.4 | 2026-11-03 | ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in… |
CVE-2026-77778 | High | 7.1 | 2026-11-03 | ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered ke… |
CVE-2026-77777 | High | 7.1 | 2026-11-03 | ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's A… |