CVE-2026-86677: ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potenti

CVE-2026-86677 · Severity: high · CVSS 8.8 · Published 2026-09-23

Executive brief

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution.

References

https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2026-86677.html