CVE-2026-77690 — Vulnerability intelligence

Zohocorp — ManageEngine Key Manager Plus

Published: 2026-11-04T05:41:25.586Z

CVSS

8.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands through specially crafted input when configuring a deployment target.

Sources

• CVE-2026-77690
• Original advisory
• CVE-2026-77690