Quick answers
- Is CVE-2026-92905 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-92905 being exploited in the wild.
- How severe is CVE-2026-92905?
- Medium severity, with a CVSS score of 5.3, published 24 September 2026.
- Which products and versions are affected?
- Zohocorp ManageEngine EventLog Analyzer before build 13071; Zohocorp ManageEngine Log360 before build 13071.
- Is there a fix for CVE-2026-92905?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-92905 attacked?
- It is attacked over the network, in a hosted service.
- Am I affected by CVE-2026-92905?
- Check whether you run Zohocorp ManageEngine EventLog Analyzer or Zohocorp ManageEngine Log360 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The log collector component in EventLog Analyzer and Log360 fails to properly validate malformed syslog datagrams, allowing an unauthenticated attacker with network access to the syslog listener port to trigger an unhandled exception that crashes the service. The vulnerability is triggered by sending specially crafted syslog packets to the syslog listener, causing a denial of service. The fix improves input validation to safely discard malformed packets and allow the service to continue running.
Affected products
- ZohoCorp ManageEngine EventLog Analyzer before build 13071
- ZohoCorp ManageEngine Log360 before build 13071
Timeline
- 2026-08-25: other: Fix released in build 13071
- 2026-09-24: disclosed: Vulnerability publicly disclosed