# Zoho vulnerabilities Source: https://junglewise.ai/threats/vendors/zoho Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 08:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/zoho.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 41 vulnerabilities in Zoho: 7 in the last 7 days and 29 in the last 90 days, 13 of them critical and 9 exploited in the wild. The most recent, CVE-2026-12591, was published on 12 November 2026. 4 vulnerabilities in the last four weeks, down 75% on the four before (16). 1 critical against 2. 8 technologies have a page of their own. ## Counts - Last 7 days: 7 - Last 30 days: 11 - Last 90 days: 29 - All time: 41 (13 critical, 9 exploited in the wild) ## About Zoho An Indian multinational technology company that focuses on web-based business tools and information technology management software. ## Latest Zoho vulnerabilities - [CVE-2026-12591: Zoho ManageEngine M365 Manager Plus privilege escalation to RCE](https://junglewise.ai/threats/cve-2026-12591-zohocorp-manageengine-m365-manager-plus-versions-below-4818-is) (critical, CVSS 9.9, published 12 Nov 2026) - [CVE-2026-76981: Zoho ManageEngine ADAudit Plus SQL injection in custom reports](https://junglewise.ai/threats/cve-2026-76981-zoho-corporation-manageengine-adaudit-plus-versions-below-8711) (high, CVSS 8.8, published 11 Nov 2026) - [CVE-2026-12062: Zoho ManageEngine ADAudit Plus SQL injection in Reports API](https://junglewise.ai/threats/cve-2026-12062-zoho-corporation-manageengine-adaudit-plus-versions-below-8703) (high, CVSS 8.8, published 11 Nov 2026) - [CVE-2026-12574: Zoho ManageEngine DDI Central server-side HTML injection in PDF generation](https://junglewise.ai/threats/cve-2026-12574-zoho-corporation-manageengine-ddi-central-versions-6200-and-below) (high, CVSS 8.1, published 10 Nov 2026) - [CVE-2026-12572: Zoho ManageEngine DDI Central SQL injection in HA replication](https://junglewise.ai/threats/cve-2026-12572-zoho-corporation-manageengine-ddi-central-version-below-6201-is) (high, CVSS 7.2, published 10 Nov 2026) - [CVE-2026-12266: Zoho ManageEngine DDI Central LDAP bind password exposure](https://junglewise.ai/threats/cve-2026-12266-zoho-corporation-manageengine-ddi-central-versions-6200-and-below) (high, CVSS 7.6, published 10 Nov 2026) - [CVE-2026-95646: Zoho ManageEngine DDI Central Unicode command injection in Cisco IOS DHCP](https://junglewise.ai/threats/cve-2026-95646-zoho-corporation-manageengine-ddi-central-versions-6500-and-below) (high, CVSS 8, published 10 Nov 2026) - [CVE-2026-77690: ManageEngine Key Manager Plus command injection in deployment configuration](https://junglewise.ai/threats/cve-2026-77690-zohocorp-manageengine-key-manager-plus-versions-before-7151-were) (high, CVSS 8.8, published 4 Nov 2026) - [CVE-2026-77778: ManageEngine Key Manager Plus improper access control in certificate export](https://junglewise.ai/threats/cve-2026-77778-zohocorp-manageengine-key-manager-plus-versions-up-to-7150-allow) (high, CVSS 7.1, published 3 Nov 2026) - [CVE-2026-16900: Zoho ManageEngine EventLog Analyzer and Log360 authentication bypass in collector registration](https://junglewise.ai/threats/cve-2026-16900-zohocorp-manageengine-log360-and-eventlog-analyzer-versions-13071) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-62131: Zoho Flow PHP object injection vulnerability](https://junglewise.ai/threats/cve-2026-62131-unauthenticated-php-object-injection-in-zoho-flow-2-14-5-versions) (critical, CVSS 9.8, published 29 Oct 2026) - [CVE-2026-12264: Zoho ManageEngine DDI Central arbitrary file write in HA Failover Config sync](https://junglewise.ai/threats/cve-2026-12264-zohocorp-manageengine-ddi-central-versions-before-6201-are) (high, CVSS 8.8, published 28 Sep 2026) - [CVE-2026-86683: Zoho ManageEngine Applications Manager privilege escalation in proxy settings](https://junglewise.ai/threats/cve-2026-86683-zohocorp-manageengine-applications-manager-versions-182000-and) (high, CVSS 8.1, published 23 Sep 2026) - [CVE-2026-86679: Zoho ManageEngine Applications Manager permission bypass in service monitor deletion](https://junglewise.ai/threats/cve-2026-86679-zohocorp-manageengine-applications-manager-versions-182000-and) (high, CVSS 7.1, published 23 Sep 2026) - [CVE-2026-86678: Zoho ManageEngine Applications Manager API key disclosure](https://junglewise.ai/threats/cve-2026-86678-zohocorp-manageengine-applications-manager-versions-182000-and) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-86677: Zoho ManageEngine Applications Manager privilege escalation in synchronization](https://junglewise.ai/threats/cve-2026-86677-zohocorp-manageengine-applications-manager-versions-182000-and) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-76980: Zoho ManageEngine OpManager and Firewall Analyzer credential exposure in syslog collector](https://junglewise.ai/threats/cve-2026-76980-zohocorp-manageengine-opmanager-and-firewall-analyzer-versions-12) (high, CVSS 7.4, published 23 Sep 2026) - [CVE-2026-76979: Zoho ManageEngine OpManager and Firewall Analyzer XML injection in Rule Tracking](https://junglewise.ai/threats/cve-2026-76979-zohocorp-manageengine-opmanager-and-firewall-analyzer-versions-12) (high, CVSS 7.7, published 23 Sep 2026) - [CVE-2026-76978: Zoho ManageEngine OpManager and Firewall Analyzer command injection in Diagnose Settings](https://junglewise.ai/threats/cve-2026-76978-zohocorp-manageengine-opmanager-and-firewall-analyzer-versions-12) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-19599: Zoho ManageEngine OpManager MSP remote code execution in Notification Profile](https://junglewise.ai/threats/cve-2026-19599-zohocorp-manageengine-opmanager-msp-versions-12-8-709-and-below) (critical, CVSS 9.9, published 23 Sep 2026) - [CVE-2026-84791: Zoho ManageEngine OpManager and Firewall Analyzer access control bypass](https://junglewise.ai/threats/cve-2026-84791-zohocorp-manageengine-opmanager-and-firewall-analyzer-versions-12) (high, CVSS 7.1, published 23 Sep 2026) - [CVE-2026-84787: Zoho ManageEngine OpManager privilege escalation through Report Profile import](https://junglewise.ai/threats/cve-2026-84787-zohocorp-manageengine-opmanager-and-firewall-analyzer-versions-12) (high, CVSS 8.1, published 23 Sep 2026) - [CVE-2026-15358: ManageEngine OpManager path traversal in Smart Update Manager](https://junglewise.ai/threats/cve-2026-15358-zohocorp-manageengine-opmanager-and-network-configuration-manager) (high, CVSS 7.5, published 23 Sep 2026) - [CVE-2026-14913: Zoho ManageEngine OpManager SQL injection in Rule Management Search Reports](https://junglewise.ai/threats/cve-2026-14913-zohocorp-manageengine-opmanager-and-firewall-analyzer-versions-12) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-12370: Zoho ManageEngine OpManager SSTI in Configlet processing](https://junglewise.ai/threats/cve-2026-12370-zohocorp-manageengine-opmanager-netflow-analyzer-and-network) (high, CVSS 7.6, published 23 Sep 2026) ## Most severe Zoho vulnerabilities - [CVE-2022-47966: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-47966-zoho-manageengine-multiple-products-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 23 Jan 2023) - [CVE-2022-35405: Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-35405-zoho-manageengine-multiple-products-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 22 Sep 2022) - [CVE-2021-44515: Zoho Desktop Central Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-44515-zoho-desktop-central-authentication-bypass-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 10 Dec 2021) - [CVE-2021-37415: Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-37415-zoho-manageengine-servicedesk-authentication-bypass-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 1 Dec 2021) - [CVE-2021-44077: Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-44077-zoho-manageengine-servicedesk-plus-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 1 Dec 2021) - [CVE-2020-10189: Zoho ManageEngine Desktop Central File Upload Vulnerability](https://junglewise.ai/threats/cve-2020-10189-zoho-manageengine-desktop-central-file-upload-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2021-40539: Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2021-40539-zoho-manageengine-adselfservice-plus-authentication-bypass) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2019-8394: Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability](https://junglewise.ai/threats/cve-2019-8394-zoho-manageengine-servicedesk-plus-sdp-file-upload-vulnerability) (critical, exploited in the wild, CVSS 7.5, published 3 Nov 2021) - [CVE-2022-28810: Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-28810-zoho-manageengine-adselfservice-plus-remote-code-execution) (critical, exploited in the wild, CVSS 6.8, published 7 Mar 2023) - [CVE-2026-19599: Zoho ManageEngine OpManager MSP remote code execution in Notification Profile](https://junglewise.ai/threats/cve-2026-19599-zohocorp-manageengine-opmanager-msp-versions-12-8-709-and-below) (critical, CVSS 9.9, published 23 Sep 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, down 75% on the four before (16). 1 critical against 2. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 2 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 15 | 2 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 1 | 1 | 0 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 7 | 1 | 0 | ## Zoho technologies - [Zoho ManageEngine](https://junglewise.ai/threats/technologies/manageengine): 6 vulnerabilities - [Zoho ManageEngine OpManager](https://junglewise.ai/threats/technologies/manageengine-opmanager): 6 vulnerabilities - [Zoho ManageEngine OpManager Enterprise Edition](https://junglewise.ai/threats/technologies/manageengine-opmanager-enterprise-edition): 6 vulnerabilities - [Zoho ManageEngine OpManager Nexus Enterprise Edition](https://junglewise.ai/threats/technologies/manageengine-opmanager-nexus-enterprise-edition): 6 vulnerabilities - [Zoho ManageEngine Firewall Analyzer](https://junglewise.ai/threats/technologies/manageengine-firewall-analyzer): 5 vulnerabilities - [Zoho ManageEngine OpManager Nexus](https://junglewise.ai/threats/technologies/manageengine-opmanager-nexus): 5 vulnerabilities - [Zoho ManageEngine DDI Central](https://junglewise.ai/threats/technologies/zoho-manageengine-ddi-central): 5 vulnerabilities - [Zoho ManageEngine Applications Manager](https://junglewise.ai/threats/technologies/manageengine-applications-manager): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Zoho vulnerabilities", https://junglewise.ai/threats/vendors/zoho, 12 November 2026.