Vendor
Zoho vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 41 vulnerabilities in Zoho: 7 in the last 7 days and 29 in the last 90 days, 13 of them critical and 9 exploited in the wild. The most recent, CVE-2026-12591, was published on 12 November 2026. 4 vulnerabilities in the last four weeks, down 75% on the four before (16). 1 critical against 2. 8 technologies have a page of their own.
- Last 7 days
- 7
- Last 90 days
- 29
- Critical, all time
- 13
- Exploited in the wild
- 9
About Zoho
An Indian multinational technology company that focuses on web-based business tools and information technology management software.
Zoho technologies
Latest Zoho vulnerabilities
- CVE-2026-12591: Zoho ManageEngine M365 Manager Plus privilege escalation to RCEcriticalCVSS 9.9
- CVE-2026-76981: Zoho ManageEngine ADAudit Plus SQL injection in custom reportshighCVSS 8.8
- CVE-2026-12062: Zoho ManageEngine ADAudit Plus SQL injection in Reports APIhighCVSS 8.8
- CVE-2026-12574: Zoho ManageEngine DDI Central server-side HTML injection in PDF generationhighCVSS 8.1
- CVE-2026-12572: Zoho ManageEngine DDI Central SQL injection in HA replicationhighCVSS 7.2
- CVE-2026-12266: Zoho ManageEngine DDI Central LDAP bind password exposurehighCVSS 7.6
- CVE-2026-95646: Zoho ManageEngine DDI Central Unicode command injection in Cisco IOS DHCPhighCVSS 8
- CVE-2026-77690: ManageEngine Key Manager Plus command injection in deployment configurationhighCVSS 8.8
- CVE-2026-77778: ManageEngine Key Manager Plus improper access control in certificate exporthighCVSS 7.1
- CVE-2026-16900: Zoho ManageEngine EventLog Analyzer and Log360 authentication bypass in collector registrationhighCVSS 7.5
- CVE-2026-62131: Zoho Flow PHP object injection vulnerabilitycriticalCVSS 9.8
- CVE-2026-12264: Zoho ManageEngine DDI Central arbitrary file write in HA Failover Config synchighCVSS 8.8
- CVE-2026-86683: Zoho ManageEngine Applications Manager privilege escalation in proxy settingshighCVSS 8.1EPSS 0.7%
- CVE-2026-86679: Zoho ManageEngine Applications Manager permission bypass in service monitor deletionhighCVSS 7.1EPSS 0.8%
- CVE-2026-86678: Zoho ManageEngine Applications Manager API key disclosurehighCVSS 8.8EPSS 0.7%
- CVE-2026-86677: Zoho ManageEngine Applications Manager privilege escalation in synchronizationhighCVSS 8.8EPSS 2.0%
- CVE-2026-76980: Zoho ManageEngine OpManager and Firewall Analyzer credential exposure in syslog collectorhighCVSS 7.4EPSS 0.4%
- CVE-2026-76979: Zoho ManageEngine OpManager and Firewall Analyzer XML injection in Rule TrackinghighCVSS 7.7EPSS 1.1%
- CVE-2026-76978: Zoho ManageEngine OpManager and Firewall Analyzer command injection in Diagnose SettingshighCVSS 8.8EPSS 3.7%
- CVE-2026-19599: Zoho ManageEngine OpManager MSP remote code execution in Notification ProfilecriticalCVSS 9.9EPSS 2.9%
- CVE-2026-84791: Zoho ManageEngine OpManager and Firewall Analyzer access control bypasshighCVSS 7.1EPSS 0.6%
- CVE-2026-84787: Zoho ManageEngine OpManager privilege escalation through Report Profile importhighCVSS 8.1EPSS 0.9%
- CVE-2026-15358: ManageEngine OpManager path traversal in Smart Update ManagerhighCVSS 7.5EPSS 1.1%
- CVE-2026-14913: Zoho ManageEngine OpManager SQL injection in Rule Management Search ReportshighCVSS 8.8EPSS 1.0%
- CVE-2026-12370: Zoho ManageEngine OpManager SSTI in Configlet processinghighCVSS 7.6EPSS 1.5%
Most severe Zoho vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2022-47966: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2022-35405: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-44515: Zoho Desktop Central Authentication Bypass Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-37415: Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-44077: Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2020-10189: Zoho ManageEngine Desktop Central File Upload Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-40539: Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2019-8394: Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerabilitycriticalexploited in the wildCVSS 7.5
- CVE-2022-28810: Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 6.8
- CVE-2026-19599: Zoho ManageEngine OpManager MSP remote code execution in Notification ProfilecriticalCVSS 9.9EPSS 2.9%
Vulnerabilities per week
4 vulnerabilities in the last four weeks, down 75% on the four before (16). 1 critical against 2. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 2 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 15 | 2 | |
| 28 Sep 2026 | 1 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 1 | 1 | |
| 2 Nov 2026 | 3 | 0 | |
| 9 Nov 2026 | 7 | 1 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Zoho vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/zoho)<a href="https://junglewise.ai/threats/vendors/zoho"><img src="https://junglewise.ai/threats/vendors/zoho/badge.svg" alt="Zoho vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/zoho.json, and this page as text at https://junglewise.ai/threats/vendors/zoho.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Zoho vulnerabilities", https://junglewise.ai/threats/vendors/zoho, 12 November 2026.