PT-2026-136074

CVE-2026-77778

·

Published

2026-11-03

·

Updated

2026-11-03

Description by

CVSS 3.1
7.1
High
MetricsAV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-1220: Insufficient Granularity of Access Control
Related identifiers
CVE-2026-77778
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com