ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control...

0.91

github-advisories · v1 · published 11/3/2026, 12:31:48 PM · modified 11/3/2026, 12:31:53 PM · TLP:CLEAR

enterprise.deploymentoffsec.vulnerability

Source evidence ↗

Entities

cwe: CWE-1220cve: CVE-2026-77777ghsa: GHSA-9c74-3mf8-v92c

Assessment

Fact summary

low · heuristic

ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials.

Technical delta

low · heuristic

Automated delta unavailable (heuristic mode).

Defensive significance

low · heuristic

None identified (heuristic mode).

Extracted text

ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials.