CVE-2026-77779: Improper access control vulnerability
Published Nov 4, 2026
·Updated
ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated low-privilege users to export keys outside their authorized scope.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ManageEngine Key Manager Plusto a version that resolves this vulnerability.Fixed in 7151
Event History
Nov 4, 2026
CVE Published
via MITRE·05:31 AM
Data Sourced
via MITRE·05:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An authenticated low-privilege user can exploit it. The issue allows that user to export keys that are outside their authorized scope.
2
Which installations are affected?
ManageEngine Key Manager Plus versions before 7151 are affected.
3
Is user interaction required for exploitation?
No user interaction is required. Exploitation does require an authenticated account with low privileges.