CVE-2026-3324CWE-288

CVE-2026-3324

High · published April 16, 2026

CVSS v3.1
8.2
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.02062 · 81.2th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-04-16T19:17Z
Affected products (8)
ProductVersionsFixed in
zohocorp/manageengine_log360all versions—
zohocorp/manageengine_log360all versions—
zohocorp/manageengine_log360all versions—
zohocorp/manageengine_log360all versions—
zohocorp/manageengine_log360all versions—
zohocorp/manageengine_log360all versions—
zohocorp/manageengine_log360all versions—
zohocorp/manageengine_log360all versions—
References (1)
https://www.manageengine.com/log-management/advisory/CVE-2026-3324.html · 0fc0942c-577d-436f-ae8e-945763c79b02
EPSS history
Timeline
  • 16 APR 14:30Z
    Authentication Bypass
    cvelistv5