CVE-2026-13594

CriticalCVSS 9.1

Published: 03/11/2026(UTC)Translated: 03/11/2026(UTC)NVD NIST

Summary

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Risk Assessment

An attacker could gain unauthorized access to the log management and event analysis system, potentially compromising data confidentiality and log integrity.

Recommendation

Update ManageEngine Log360 and EventLog Analyzer to a version newer than 13062. Verify whether unauthorized access has occurred.

Other vulnerabilities in ManageEngine Log360

CVE-2026-16900High
Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing an unauthenticated actor to register a local collector by sending a specially crafted registration request.

Original NVD description (English source)

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS