CVE-2026-77777
Full vulnerability record from the local CVENow database.
Description
ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials.
Severity
HIGH
CVSS score
7.1
(v3.1)
Vulnerability status
Received
Source identifier
0fc0942c-577d-436f-ae8e-945763c79b02
Published
2026-11-03 10:17:19.640000
Last modified
2026-11-03 10:17:19.640000
View original CVE JSON
{
"id": "CVE-2026-77777",
"sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
"published": "2026-11-03T10:17:19.640",
"lastModified": "2026-11-03T10:17:19.640",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials."
}
],
"affected": [
{
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"affectedData": [
{
"vendor": "Zohocorp",
"product": "ManageEngine Key Manager Plus",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "7151",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 4.7
}
]
},
"weaknesses": [
{
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1220"
}
]
}
],
"references": [
{
"url": "https://www.manageengine.com/key-manager/advisory/cve-2026-77777.html",
"source": "0fc0942c-577d-436f-ae8e-945763c79b02"
}
]
}