[ CVE-2026-77690 · Published 4 Nov 2026 ]
Vulnerability in Zohocorp ManageEngine Key Manager Plus
CVSS 8.8
EPSS 16%No fix listed yet
[ Why it matters ]Priority signals
- EPSS: 16% chance of exploitation in the next 30 days (higher than 97% of CVEs)
[ Description ]Official description
ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands through specially crafted input when configuring a deployment target.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.