ManageEngine Log360 (< 13062) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/manageengine-log360--13062/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 11:29:01 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgZohocorp ManageEngine Eventlog Analyzer and Log360: Authenticated remote code execution (CVE-2026-8923)https://feed.craftedsignal.io/briefs/2026-11-manageengine-rce/Mon, 02 Nov 2026 11:29:01 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-manageengine-rce/ManageEngine Eventlog Analyzer and Log360 versions prior to 13062 contain an authenticated remote code execution vulnerability in the log forwarding feature.Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to authenticated remote code execution (RCE) via the Log Forwarding configuration option. An attacker with valid credentials can leverage this feature to execute arbitrary code on the underlying host system.

Impact

Successful exploitation allows an authenticated user to achieve remote code execution on the server hosting the ManageEngine application, potentially leading to full system compromise.

Recommendation

  • Upgrade ManageEngine Eventlog Analyzer and ManageEngine Log360 to version 13062 or later immediately.
  • Audit existing ManageEngine administrative accounts and restrict access to the Log Forwarding configuration interface to verified administrators only.
  • Review historical logs for any unusual modifications to log forwarding settings or suspicious process execution spawning from the ManageEngine service account.
]]>highadvisoryremote-code-executionvulnerabilityenterprise-software