CVE-2026-86708

10.0 Critique

Publiée le 23/09/2026 à 16:17 · Modifiée le 24/09/2026 à 06:18 · En attente d'analyse NVD · Source : 0fc0942c-577d-436f-ae8e-945763c79b02

Description

ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.

Traduire en français

Produits concernés

Zohocorp ManageEngine Applications Manager

Scores CVSS

Version	Score	Source	Vecteur
3.1	10.0 Critique	0fc0942c-577d-436f-ae8e-945763c79b02	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N`

Faiblesses (CWE)

CWE-321

Références

https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86708.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories