Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.manageengine.com/log-management/advisory/CVE-2026-3324.html Patch, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.2 · zohocorpNVD modified 2026-10-26 22:10
Affected (CPE criteria) 8
cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13000:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13001:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13003:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13005:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13006:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13008:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13011:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13013:*:*:*:*:*:*
References 1
- https://www.manageengine.com/log-management/advisory/CVE-2026-3324.html Patch, Vendor Advisory