ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export...

0.69

github-advisories · v1 · published 11/3/2026, 12:31:48 PM · modified 11/3/2026, 12:31:53 PM · TLP:CLEAR

offsec.vulnerability

Source evidence ↗

Entities

cve: CVE-2026-77778ghsa: GHSA-jhqj-68fm-5856cwe: CWE-1220

Assessment

Fact summary

low · heuristic

ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.

Technical delta

low · heuristic

Automated delta unavailable (heuristic mode).

Defensive significance

low · heuristic

None identified (heuristic mode).

Extracted text

ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.