CVE-2026-77777
High · 7.1CVSS
7.1
EPSS
0.7%
Published
Nov 3, 2026
CISA due date
—
The record
ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-77778 ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to… CWE-1220
- CVE-2026-119627 The web profile and RSS/Atom feed routes of users and organizations checked only whether… CWE-1220
- CVE-2026-57202 Asterisk is an open source private branch exchange and telephony toolkit. CWE-1220
- CVE-2026-96372 Insufficient Granularity of Access Control vulnerability in Drupal Webform allows… CWE-1220
- CVE-2026-85316 Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP… CWE-1220
- CVE-2026-83499 Insufficient granularity of access control in Windows Server Update Service allows an… CWE-1220
- CVE-2026-81969 Insufficient granularity of access control in Windows Server Update Service allows an… CWE-1220
- CVE-2026-70216 Insufficient granularity of access control in Windows Mobile Device Management allows an… CWE-1220