Key Manager Plus (< 7151) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/key-manager-plus--7151/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 03 Nov 2026 11:57:41 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgManageEngine Key Manager Plus SAML authentication bypass (CVE-2026-77800)https://feed.craftedsignal.io/briefs/2026-11-manageengine-key-manager-plus-saml-bypass/Tue, 03 Nov 2026 11:57:41 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-manageengine-key-manager-plus-saml-bypass/ManageEngine Key Manager Plus versions prior to 7151 contain a SAML authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by presenting crafted SAML assertions.ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass flaw. The vulnerability allows an attacker to gain unauthorized access by submitting a valid SAML assertion intended for a different service provider to the Key Manager Plus application. This bypass circumvents standard authentication mechanisms.

Impact

Successful exploitation allows an unauthenticated attacker to bypass authentication and gain unauthorized access to the Key Manager Plus administrative interface.

Recommendation

  • Upgrade ManageEngine Key Manager Plus to version 7151 or later immediately to patch CVE-2026-77800.
  • Review authentication logs for successful logins that originated from unusual sources or show inconsistencies in SAML assertion parameters if your environment utilizes SAML integration.
]]>highadvisoryvulnerabilityauthentication-bypasssaml