CVE-2026-8923

Full vulnerability record from the local CVENow database.

Description

Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option.

Severity

HIGH

CVSS score

8.7 (v3.1)

Vulnerability status

Received

Source identifier

0fc0942c-577d-436f-ae8e-945763c79b02

Published

2026-11-02 11:17:33.380000

Last modified

2026-11-02 11:17:33.380000

View original CVE JSON

{
  "id": "CVE-2026-8923",
  "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
  "published": "2026-11-02T11:17:33.380",
  "lastModified": "2026-11-02T11:17:33.380",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option."
    }
  ],
  "affected": [
    {
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "affectedData": [
        {
          "vendor": "Zohocorp",
          "product": "ManageEngine Eventlog Analyzer",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "13062",
              "versionType": "13062",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Zohocorp",
          "product": "ManageEngine Log360",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "13062",
              "versionType": "13062",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
          "baseScore": 8.7,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.3,
        "impactScore": 5.8
      }
    ]
  },
  "weaknesses": [
    {
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.manageengine.com/products/eventlog/advisory/CVE-2026-8923.html",
      "source": "0fc0942c-577d-436f-ae8e-945763c79b02"
    }
  ]
}