Improper Access Control in ManageEngine Key Manager Plus
CVE-2026-77779

7.7HIGH

Key Information:

Vendor

Zohocorp
Status
Manageengine Key Manager Plus
Vendor
CVE Published:
4 November 2026

What is CVE-2026-77779?

ManageEngine Key Manager Plus versions prior to 7151 are susceptible to an Improper Access Control vulnerability, enabling authenticated low-privilege users to export sensitive keys outside their authorized access scope. This flaw potentially exposes critical cryptographic keys, compromising the security integrity and confidentiality of the system.

Affected Version(s)

ManageEngine Key Manager Plus 0 < 7151

References

https://www.manageengine.com/key-manager/advisory/cve-202...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.