CVE-2026-3324

Published: Apr 16, 2026Modified: Aug 11, 2026

8.2

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Exploitability: 3.9 / Impact: 4.2

Source: 0fc0942c-577d-436f-ae8e-945763c79b02 (Secondary)

Description

Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.

Affected (8)

Products: Zohocorp: Manageengine Log360

Zohocorp

1 product

Manageengine Log360

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Log360	Version 13.0 build13000
Zohocorp Manageengine Log360	Version 13.0 build13001
Zohocorp Manageengine Log360	Version 13.0 build13003
Zohocorp Manageengine Log360	Version 13.0 build13005
Zohocorp Manageengine Log360	Version 13.0 build13006
Zohocorp Manageengine Log360	Version 13.0 build13008
Zohocorp Manageengine Log360	Version 13.0 build13011
Zohocorp Manageengine Log360	Version 13.0 build13013

Related CWEs

CWE-288

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References (1)

https://www.manageengine.com/log-management/advisory/CVE-2026-3324.html

Source: 0fc0942c-577d-436f-ae8e-945763c79b02

PatchVendor Advisory

Timeline

No history available yet.