~ / search / CVE-2026-77690

CVE-2026-77690

Command injection vulnerability

State: published CNA: Zohocorp CVSS 3.1 8.8 High NVD: received

Description

ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands through specially crafted input when configuring a deployment target.

Affected products

VendorProductVersions
Zohocorp ManageEngine Key Manager Plus <7151

References

External links from the record. They lead to third-party sites.