What’s Vulnerable › Vulnerabilities

CVE-2026-3324: Authentication Bypass

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-16 · updated 2026-10-26
• Weakness: CWE-288

Description

Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.

Affected products

• Zohocorp ManageEngine Log360: 13.0-build13000, 13.0-build13001, 13.0-build13003, 13.0-build13005, 13.0-build13006, 13.0-build13008 (+2)

References

• https://www.manageengine.com/log-management/advisory/CVE-2026-3324.html

Get alerted when CVE-2026-3324 or the next vulnerability affects your stack