Skip to content
Threat Feed
Subscribe
high advisory PoC

ZohoCorp ManageEngine Key Manager Plus: Input validation vulnerability (CVE-2026-77691)

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA.

CVE search metadata

CVE search record: CVE-2026-77691. Severity: high. CVSS: 8.1. KEV: no. Product: ManageEngine Key Manager Plus (< 7151), ManageEngine Key Manager Plus (<= 7150). Brief: ZohoCorp ManageEngine Key Manager Plus: Input validation vulnerability (CVE-2026-77691). Brief link: https://feed.craftedsignal.io/briefs/2026-11-zoho-key-manager-plus-cve-2026-77691/

CVE search record: CVE-2026-77778. Severity: high. CVSS: 7.1. KEV: no. Product: ManageEngine Key Manager Plus (< 7151), ManageEngine Key Manager Plus (<= 7150). Brief: ZohoCorp ManageEngine Key Manager Plus: Input validation vulnerability (CVE-2026-77691). Brief link: https://feed.craftedsignal.io/briefs/2026-11-zoho-key-manager-plus-cve-2026-77691/

Triage facts

Revision 3
Applicability
ManageEngine Key Manager Plus (< 7151), ManageEngine Key Manager Plus (<= 7150)
Evidence
Unknown
Severity
High
Sources
3 public sources
Freshness
Revision 3Nov 3, 13:58 UTC
Vulnerabilities
2 CVEs
Source quality
A2Roughly even chance
Revision history 2 entries · Revision 3
  1. Revision 3

    added CVE-2026-77778

    Changed: affected_products, cves, lastmod, references, updates

    Sources: 1

  2. Revision 2

    poc_available

    Changed: claim_state, has_poc, lastmod, poc_references, references, updates

    Sources: 1

CVE-2026-77691 identifies a vulnerability in ZohoCorp ManageEngine Key Manager Plus versions before 7151. The vulnerability allows authenticated users to enter malicious input when configuring a Microsoft CA.