by Kastro
Paper/Archive/CVE-2026-13594

CVE-2026-13594

Zohocorp Log360 — Improper Access Control vulnerability

CVSS 9.1
critical.is priorityof 100
27
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Affected

ProductAffectedFixed inSource
Log360< 1306213062CNA
EventLog Analyzer< 1306213062CNA

Scores by source

Zohocorp (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refmanageengine.com/products/eventlog/advisory/CVE-2026-13594.html