Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Unauthorized users could access ManageEngine Log360 and EventLog Analyzer

CVE-2026-13594 · published 2 days ago
Summary

Versions of ManageEngine Log360 and EventLog Analyzer up to 13062 may let a malicious person skip the normal login process and view or change data they shouldn't see. This could expose sensitive log information. Upgrade to the latest release (or apply the vendor’s fix) and review who has access, and monitor logs for unexpected activity.

What to do
  • Update zohocorp log360 to version 13062 or later.
  • Update zohocorp eventlog analyzer to version 13062 or later.
Affected software
VendorProductAffected versions
zohocorp log360 < 13062
zohocorp eventlog analyzer < 13062
Original advisory text
Improper Access Control vulnerability
Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.1 Critical
Exploitation
1% chance of attack within 30 days
Type
CWE-284Improper Access Control
Timeline
Published3 Nov 2026
Updated4 Nov 2026
First seen3 Nov 2026
Sources
CVE-2026-13594 · NVD
CVE-2026-13594 · MITRE
Track software like this
Free during beta