PT-2026-136035
CVE-2026-13594
·
Published
2026-11-03
·
Updated
2026-11-03
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ManageEngine Log360 versions prior to 13062
EventLog Analyzer versions prior to 13062
Description
An improper access control flaw allows unauthenticated remote attackers to gain unauthorized access to the SIEM consoles of the log management software without requiring a user account or any user interaction.
Recommendations
Update ManageEngine Log360 to version 13062 or later.
Update EventLog Analyzer to version 13062 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾