Authentication Bypass in ZohoCorp ManageEngine OpManager with Application Manager Plugin
CVE-2026-75825

8.8HIGH

Key Information:

Vendor

Zohocorp
Status
Manageengine Opmanager
Vendor
CVE Published:
23 September 2026

What is CVE-2026-75825?

An authentication bypass vulnerability was identified in ZohoCorp's ManageEngine OpManager when the Application Manager Plugin is enabled. This flaw allows unauthorized users to gain access to restricted areas of the application without proper authentication, potentially compromising sensitive data and functionality. Organizations using versions 12.8.710 and below of OpManager should take immediate action to mitigate this risk.

Affected Version(s)

ManageEngine OpManager 0 < 12.8.711

References

https://www.manageengine.com/itom/advisory/cve-2026-75825...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.