CVE-2026-13594: Improper Access Control vulnerability

Published Nov 3, 2026

Updated

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:29 AM

Data Sourced

via MITRE·07:29 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

ManageEngine Log360 and EventLog Analyzer versions 13062 and below are affected.

Does exploitation require authentication or user interaction?

No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What access could an attacker gain?

An adversary could gain unauthorized access to the affected product. The supplied impact information indicates high confidentiality and integrity impact, with no availability impact.

CVE-2026-13594: Improper Access Control vulnerability

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What access could an attacker gain?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What access could an attacker gain?