CVE-2026-16053CWE-23

CVE-2026-16053

High · published August 11, 2026

CVSS v3.1
8.5
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.01767 · 77.9th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2026-08-11T11:17Z
References (1)
https://www.manageengine.com/microsoft-365-management-reporting/CVE-2026-16053.html · 0fc0942c-577d-436f-ae8e-945763c79b02
EPSS history
Timeline
  • 11 AUG 06:36Z
    Path Traversal
    cvelistv5