by Kastro
Paper/Archive/CVE-2026-86708

CVE-2026-86708

Zohocorp ManageEngine Applications Manager — Sensitive data exposure

EPSS 3%CVSS 10.0
critical.is priorityof 100
47
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 86.0.860 × 2017.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.

Affected

ProductAffectedFixed inSource
ManageEngine Applications Manager< 182300182300CNA

Scores by source

Zohocorp (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refmanageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86708.html