Dashboard / CVE-2026-13594

CVE-2026-13594

CRITICAL
INFO Priority: 0.10 BB Relevance: 78/100
Published: 2026-11-03 Modified: 2026-11-04 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: None

Description

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
Zohocorp EventLog Analyzer 0 < 13062
Zohocorp EventLog Analyzer 0 < 13062
Zohocorp EventLog Analyzer 0 < 13062
Zohocorp Log360 0 < 13062
Zohocorp Log360 0 < 13062
Zohocorp Log360 0 < 13062

References & Advisories (1)

Bug Bounty Relevance

78 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS — Exploitation Probability

1.14%
Raw Score 0.011420
Percentile 66.8%
Date 2026-11-05

EPSS Trend

2026-11-05
0.01142
2026-11-04
0.01142
2026-11-03
0.01142

Intelligence Sources

mitre ref →
nvd ref →

External Links