Certificate Export Vulnerability in Zoho ManageEngine Key Manager Plus
CVE-2026-77778

7.1HIGH

Key Information:

Vendor

Zohocorp
Status
Manageengine Key Manager Plus
Vendor
CVE Published:
3 November 2026

What is CVE-2026-77778?

The ZohoCorp ManageEngine Key Manager Plus product contains a vulnerability that enables authenticated users to export certificates belonging to other users into their own registered key vaults. This flaw poses a significant risk as it can lead to unauthorized certificate management and access, potentially compromising sensitive data and user accounts. Organizations utilizing this software should prioritize reviewing their configurations and implementing necessary security measures to mitigate this vulnerability.

Affected Version(s)

ManageEngine Key Manager Plus 0 < 7151

References

https://www.manageengine.com/key-manager/advisory/cve-202...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.