Live › vulnerability › CVE-2026-119682
A low-privileged logged-in user of ManageEngine SharePoint Manager Plus can bypass authorization checks in its multi-factor authentication feature. The attacker can read and change MFA settings, enumerate and delete MFA-enrolled accounts, and lock legitimate users out.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 15:31 UTC. All times on this page are UTC.
Any deployment of ManageEngine SharePoint Manager Plus with MFA in use, where a low-privileged user has an account. The sources report build 4506 as the reproduced version, and build 4507 as the fix. unknown whether other builds are affected.
No product ranges from the sources yet.
4507.4507 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SharePoint Manager Plus (SPMP). A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration settings, enable or disable MFA for the application, enumerate MFA-enrolled users, and delete MFA-enrolled accounts. Successful exploitation could allow an attacker to weaken authentication protections or cause a denial of service by configuring invalid MFA settings, potentially locking legitimate users out of the application. This vulnerability was fixed in build 4507. The reproduction explicitly uses build 4506.
This page as .md · .json · in your agent: get_signal("CVE-2026-119682")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.