# Zohocorp vulnerabilities Source: https://junglewise.ai/threats/vendors/zohocorp Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/zohocorp.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 33 vulnerabilities in Zohocorp: 7 in the last 7 days and 17 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-75869, was published on 12 November 2026. 4 vulnerabilities in the last four weeks, down 20% on the four before (5). 0 critical against 1. 3 technologies have a page of their own. ## Counts - Last 7 days: 7 - Last 30 days: 10 - Last 90 days: 17 - All time: 33 (3 critical, 0 exploited in the wild) ## About Zohocorp Software company providing business applications and services. ## Latest Zohocorp vulnerabilities - [CVE-2026-75869: ManageEngine DDI Central authorization bypass and PowerShell injection](https://junglewise.ai/threats/cve-2026-75869-zohocorp-manageengine-ddi-central-versions-below-6301-is-affected) (high, CVSS 8.8, published 12 Nov 2026) - [CVE-2026-75868: ManageEngine DDI Central authorization bypass in DHCP options](https://junglewise.ai/threats/cve-2026-75868-zohocorp-manageengine-ddi-central-versions-below-6301-is-affected) (high, CVSS 8.1, published 12 Nov 2026) - [CVE-2026-75867: ManageEngine DDI Central authorization bypass in DHCP configuration](https://junglewise.ai/threats/cve-2026-75867-zohocorp-manageengine-ddi-central-versions-below-6301-is-affected) (high, CVSS 8.1, published 12 Nov 2026) - [CVE-2026-75864: Zohocorp ManageEngine DDI Central improper authorization in DNS zone deletion](https://junglewise.ai/threats/cve-2026-75864-zohocorp-manageengine-ddi-central-versions-below-6301-is-affected) (high, CVSS 8.1, published 12 Nov 2026) - [CVE-2026-19422: Zohocorp ManageEngine DDI Central authentication bypass in Windows agent APIs](https://junglewise.ai/threats/cve-2026-19422-zohocorp-manageengine-ddi-central-versions-below-6301-is-affected) (critical, CVSS 9.1, published 12 Nov 2026) - [CVE-2026-19421: Zohocorp ManageEngine DDI Central PowerShell injection in DNS TXT records](https://junglewise.ai/threats/cve-2026-19421-zohocorp-manageengine-ddi-central-versions-below-6301-is-affected) (high, CVSS 8.8, published 12 Nov 2026) - [CVE-2026-12507: Zohocorp ManageEngine remote code execution in Reports module](https://junglewise.ai/threats/cve-2026-12507-zohocorp-manageengine-assetexplorer-versions-below-7860) (critical, CVSS 9.1, published 12 Nov 2026) - [CVE-2026-77691: ZohoCorp ManageEngine Key Manager Plus command injection in CA configuration](https://junglewise.ai/threats/cve-2026-77691-zohocorp-manageengine-key-manager-plus-versions-before-7151-allow) (high, CVSS 8.1, published 3 Nov 2026) - [CVE-2026-8923: Zohocorp ManageEngine Eventlog Analyzer log forwarding remote code execution](https://junglewise.ai/threats/cve-2026-8923-zohocorp-manageengine-eventlog-analyzer-and-manageengine-log360) (high, CVSS 8.7, published 2 Nov 2026) - [CVE-2026-18199: Zohocorp ManageEngine Password Manager Pro and PAM360 authenticated RCE](https://junglewise.ai/threats/cve-2026-18199-zohocorp-manageengine-password-manager-pro-versions-before-13236) (high, CVSS 8.8, published 2 Nov 2026) - [CVE-2026-14308: ManageEngine Malware Protection Plus insufficient driver signature validation](https://junglewise.ai/threats/cve-2026-14308-zohocorp-manageengine-malware-protection-plus-versions-before-1-0) (medium, CVSS 4.9, published 13 Oct 2026) - [CVE-2026-12269: Zohocorp ManageEngine DDI Central configuration injection in HA workflow](https://junglewise.ai/threats/cve-2026-12269-zohocorp-manageengine-ddi-central-6-2-0-build-below-6201-had-a) (high, CVSS 8.8, published 28 Sep 2026) - [CVE-2026-92905: ZohoCorp ManageEngine EventLog Analyzer and Log360 DoS in log collector](https://junglewise.ai/threats/cve-2026-92905-zohocorp-manageengine-eventlog-analyzer-and-log360-before-build) (medium, CVSS 5.3, published 24 Sep 2026) - [CVE-2026-86708: ManageEngine Applications Manager hardcoded Google Cloud service-account key in installer](https://junglewise.ai/threats/cve-2026-86708-zohocorp-manageengine-applications-manager-versions-182200-and) (critical, CVSS 10, published 23 Sep 2026) - [CVE-2026-86681: ManageEngine Applications Manager privilege escalation in MBean actions](https://junglewise.ai/threats/cve-2026-86681-zohocorp-manageengine-applications-manager-versions-182200-and) (high, CVSS 7.6, published 23 Sep 2026) - [CVE-2026-84789: ZohoCorp ManageEngine OpManager and Firewall Analyzer access control bypass](https://junglewise.ai/threats/cve-2026-84789-zohocorp-manageengine-opmanager-and-firewall-analyzer-versions-12) (high, CVSS 7.1, published 23 Sep 2026) - [CVE-2026-14828: Zohocorp ManageEngine SQL Injection in password management suite](https://junglewise.ai/threats/cve-2026-14828-zohocorp-manageengine-sql-injection-in-password-management-suite) (high, CVSS 8.8, published 2 Sep 2026) - [CVE-2026-12263: Zohocorp ManageEngine Password Manager Pro and PAM360 authentication bypass](https://junglewise.ai/threats/cve-2026-12263-zohocorp-manageengine-password-manager-pro-and-pam360) (high, CVSS 8.8, published 13 Aug 2026) - [CVE-2026-3324: Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions…](https://junglewise.ai/threats/cve-2026-3324-zohocorp-manageengine-log360-versions-13000-through-13013-are) (high, CVSS 8.2, published 16 Apr 2026) - [CVE-2026-27655: Zohocorp ManageEngine Exchange Reporter Plus stored XSS in mailbox reports](https://junglewise.ai/threats/cve-2026-27655-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in) (high, CVSS 7.3, published 3 Apr 2026) - [CVE-2026-4108: Zohocorp ManageEngine Exchange Reporter Plus Stored XSS in Reports](https://junglewise.ai/threats/cve-2026-4108-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in-reports) (high, CVSS 7.3, published 3 Apr 2026) - [CVE-2026-4107: Zohocorp ManageEngine Exchange Reporter Plus Stored XSS in Reports](https://junglewise.ai/threats/cve-2026-4107-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in-reports) (high, CVSS 7.3, published 3 Apr 2026) - [CVE-2026-3880: Zohocorp ManageEngine Exchange Reporter Plus Stored XSS in Reports](https://junglewise.ai/threats/cve-2026-3880-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in-reports) (high, CVSS 7.3, published 3 Apr 2026) - [CVE-2026-3879: Zohocorp ManageEngine Exchange Reporter Plus Stored XSS in Equipment Mailbox Details report](https://junglewise.ai/threats/cve-2026-3879-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in) (high, CVSS 7.3, published 3 Apr 2026) - [CVE-2026-28703: Zohocorp ManageEngine Exchange Reporter Plus stored XSS in reports](https://junglewise.ai/threats/cve-2026-28703-zohocorp-manageengine-exchange-reporter-plus-stored-xss-in) (high, CVSS 7.3, published 3 Apr 2026) ## Most severe Zohocorp vulnerabilities - [CVE-2026-86708: ManageEngine Applications Manager hardcoded Google Cloud service-account key in installer](https://junglewise.ai/threats/cve-2026-86708-zohocorp-manageengine-applications-manager-versions-182200-and) (critical, CVSS 10, published 23 Sep 2026) - [CVE-2026-19422: Zohocorp ManageEngine DDI Central authentication bypass in Windows agent APIs](https://junglewise.ai/threats/cve-2026-19422-zohocorp-manageengine-ddi-central-versions-below-6301-is-affected) (critical, CVSS 9.1, published 12 Nov 2026) - [CVE-2026-12507: Zohocorp ManageEngine remote code execution in Reports module](https://junglewise.ai/threats/cve-2026-12507-zohocorp-manageengine-assetexplorer-versions-below-7860) (critical, CVSS 9.1, published 12 Nov 2026) - [CVE-2026-14828: Zohocorp ManageEngine SQL Injection in password management suite](https://junglewise.ai/threats/cve-2026-14828-zohocorp-manageengine-sql-injection-in-password-management-suite) (high, CVSS 8.8, published 2 Sep 2026) - [CVE-2026-12263: Zohocorp ManageEngine Password Manager Pro and PAM360 authentication bypass](https://junglewise.ai/threats/cve-2026-12263-zohocorp-manageengine-password-manager-pro-and-pam360) (high, CVSS 8.8, published 13 Aug 2026) - [CVE-2026-75869: ManageEngine DDI Central authorization bypass and PowerShell injection](https://junglewise.ai/threats/cve-2026-75869-zohocorp-manageengine-ddi-central-versions-below-6301-is-affected) (high, CVSS 8.8, published 12 Nov 2026) - [CVE-2026-19421: Zohocorp ManageEngine DDI Central PowerShell injection in DNS TXT records](https://junglewise.ai/threats/cve-2026-19421-zohocorp-manageengine-ddi-central-versions-below-6301-is-affected) (high, CVSS 8.8, published 12 Nov 2026) - [CVE-2026-18199: Zohocorp ManageEngine Password Manager Pro and PAM360 authenticated RCE](https://junglewise.ai/threats/cve-2026-18199-zohocorp-manageengine-password-manager-pro-versions-before-13236) (high, CVSS 8.8, published 2 Nov 2026) - [CVE-2026-12269: Zohocorp ManageEngine DDI Central configuration injection in HA workflow](https://junglewise.ai/threats/cve-2026-12269-zohocorp-manageengine-ddi-central-6-2-0-build-below-6201-had-a) (high, CVSS 8.8, published 28 Sep 2026) - [CVE-2026-8923: Zohocorp ManageEngine Eventlog Analyzer log forwarding remote code execution](https://junglewise.ai/threats/cve-2026-8923-zohocorp-manageengine-eventlog-analyzer-and-manageengine-log360) (high, CVSS 8.7, published 2 Nov 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, down 20% on the four before (5). 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 4 | 1 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 7 | 2 | 0 | ## Zohocorp technologies - [Zohocorp Manageengine Exchange Reporter Plus](https://junglewise.ai/threats/technologies/manageengine-exchange-reporter-plus): 12 vulnerabilities - [Zohocorp ManageEngine DDI Central](https://junglewise.ai/threats/technologies/manageengine-ddi-central): 7 vulnerabilities - [Zohocorp ManageEngine Log360](https://junglewise.ai/threats/technologies/manageengine-log360): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Zohocorp vulnerabilities", https://junglewise.ai/threats/vendors/zohocorp, 13 November 2026.