{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/manageengine-log360--13071/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-16900"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ManageEngine Log360 (\u003c= 13071)","ManageEngine EventLog Analyzer (\u003c= 13071)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Zohocorp"],"content_html":"\u003cp\u003eZohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration. This allows an unauthenticated actor to register a local collector by sending a specially crafted registration request.\u003c/p\u003e\n","date_modified":"2026-11-03T11:57:55Z","date_published":"2026-11-03T11:57:55Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-16900/","summary":"Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing an unauthenticated actor to register a local collector by sending a specially crafted registration request.","title":"Zohocorp ManageEngine Log360 and EventLog Analyzer authentication bypass (CVE-2026-16900)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-16900/"}],"language":"en","title":"CraftedSignal Threat Feed - ManageEngine Log360 (\u003c= 13071)","version":"https://jsonfeed.org/version/1.1"}