CVE-2026-3324

EUVD-2026-23247
Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.2 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 67.27%
Affected Products (NVD)
VendorProductVersion
zohocorpmanageengine_log360
13.0:build13000
zohocorpmanageengine_log360
13.0:build13001
zohocorpmanageengine_log360
13.0:build13003
zohocorpmanageengine_log360
13.0:build13005
zohocorpmanageengine_log360
13.0:build13006
zohocorpmanageengine_log360
13.0:build13008
zohocorpmanageengine_log360
13.0:build13011
zohocorpmanageengine_log360
13.0:build13013
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.manageengine.com/log-management/advisory/CVE-2026-3324.html