CVE-2026-77799 — Vulnerability intelligence

Zohocorp — ManageEngine Key Manager Plus

Published: 2026-11-03T04:57:12.810Z

CVSS

7.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor Authentication bypass that allows attackers with valid credentials to log in without a verification code.

Sources

• CVE-2026-77799
• Original advisory
• CVE-2026-77799