{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3azohocorpmanageengine_eventlog_analyzer/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:*:*:*:*:*:*:*:*","cpe:2.3:a:zohocorp:manageengine_log360:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.7,"id":"CVE-2026-8923"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ManageEngine Eventlog Analyzer (\u003c 13062)","ManageEngine Log360 (\u003c 13062)"],"_cs_severities":["high"],"_cs_tags":["remote-code-execution","vulnerability","enterprise-software"],"_cs_type":"advisory","_cs_vendors":["Zohocorp"],"content_html":"\u003cp\u003eZohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to authenticated remote code execution (RCE) via the Log Forwarding configuration option. An attacker with valid credentials can leverage this feature to execute arbitrary code on the underlying host system.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated user to achieve remote code execution on the server hosting the ManageEngine application, potentially leading to full system compromise.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade ManageEngine Eventlog Analyzer and ManageEngine Log360 to version 13062 or later immediately.\u003c/li\u003e\n\u003cli\u003eAudit existing ManageEngine administrative accounts and restrict access to the Log Forwarding configuration interface to verified administrators only.\u003c/li\u003e\n\u003cli\u003eReview historical logs for any unusual modifications to log forwarding settings or suspicious process execution spawning from the ManageEngine service account.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-02T11:29:01Z","date_published":"2026-11-02T11:29:01Z","id":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-rce/","summary":"ManageEngine Eventlog Analyzer and Log360 versions prior to 13062 contain an authenticated remote code execution vulnerability in the log forwarding feature.","title":"Zohocorp ManageEngine Eventlog Analyzer and Log360: Authenticated remote code execution (CVE-2026-8923)","url":"https://feed.craftedsignal.io/briefs/2026-11-manageengine-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}