CVE-2026-77778
High · 7.1CVSS
7.1
EPSS
0.4%
Published
Nov 3, 2026
CISA due date
—
The record
ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-77777 ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access… CWE-1220
- CVE-2026-119627 The web profile and RSS/Atom feed routes of users and organizations checked only whether… CWE-1220
- CVE-2026-57202 Asterisk is an open source private branch exchange and telephony toolkit. CWE-1220
- CVE-2026-96372 Insufficient Granularity of Access Control vulnerability in Drupal Webform allows… CWE-1220
- CVE-2026-85316 Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP… CWE-1220
- CVE-2026-83499 Insufficient granularity of access control in Windows Server Update Service allows an… CWE-1220
- CVE-2026-81969 Insufficient granularity of access control in Windows Server Update Service allows an… CWE-1220
- CVE-2026-70216 Insufficient granularity of access control in Windows Mobile Device Management allows an… CWE-1220