CVE-2026-13594

Full vulnerability record from the local CVENow database.

Description

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Severity

CRITICAL

CVSS score

9.1 (v3.1)

Vulnerability status

Received

Source identifier

0fc0942c-577d-436f-ae8e-945763c79b02

Published

2026-11-03 08:17:15.203000

Last modified

2026-11-03 08:17:15.203000

View original CVE JSON

{
  "id": "CVE-2026-13594",
  "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
  "published": "2026-11-03T08:17:15.203",
  "lastModified": "2026-11-03T08:17:15.203",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product."
    }
  ],
  "affected": [
    {
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "affectedData": [
        {
          "vendor": "Zohocorp",
          "product": "Log360",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "13062",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Zohocorp",
          "product": "EventLog Analyzer",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "13062",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2
      }
    ]
  },
  "weaknesses": [
    {
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.manageengine.com/products/eventlog/advisory/CVE-2026-13594.html",
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02"
    }
  ]
}