What’s Vulnerable › Vulnerabilities

CVE-2026-92905: Denial of Service Vulnerability

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-09-24
• Weakness: CWE-248

Description

ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets.

Affected products

• Zohocorp ManageEngine EventLog Analyzer: before 13071 — fixed in 13071
• Zohocorp ManageEngine Log360: before 13071 — fixed in 13071

How to fix

Upgrade to a fixed version: Zohocorp ManageEngine EventLog Analyzer 13071; Zohocorp ManageEngine Log360 13071. Check the vendor advisory for mitigations.

References

• https://www.manageengine.com/log-management/advisory/CVE-2026-92905.html

Get alerted when CVE-2026-92905 or the next vulnerability affects your stack