CVE-2026-13594
Received Received - Intake

Authentication Bypass in Zoho ManageEngine Log360 and EventLog Analyzer

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: ManageEngine

Description
Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-13594
EUVD
EUVD-2026-115725

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Zohocorp Log360 0
Zohocorp EventLog Analyzer 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-13594 is an improper access control vulnerability in Zoho Corporation's ManageEngine Log360 and EventLog Analyzer. It affects versions 13025 to 13061 and allows unauthorized access to the product due to weak authentication checks.

Detection Guidance

Check the installed build version of ManageEngine Log360 or EventLog Analyzer. If it is between 13025 and 13061, the system is vulnerable. Use the product's admin console or check version files to verify the build number.

Impact Analysis

An attacker could exploit this flaw to gain unauthorized access to Log360 or EventLog Analyzer, potentially compromising sensitive data, altering system configurations, or disrupting operations. The high CVSS score (9.1) indicates significant risk.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance may result in legal penalties or reputational damage.

Mitigation Strategies

Update to build 13062 or later immediately. Download the service pack from Zoho's official site and apply it to all affected instances. Ensure authentication checks are enforced post-update.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-13594. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...