---
id: "CVE-2026-13594"
kind: "vulnerability"
aliases: ["CVE-2026-13594"]
title: "ManageEngine Log360 and EventLog Analyzer builds 13025 to 13061: improper access control allows unauthorized access (fixed in 13062)"
severity: "critical"
cvss: 9.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "EventLog Analyzer", "fixed": ["13062"], "affected": ">= 13025, < 13062", "ecosystem": "vendor"}, {"name": "Log360", "fixed": ["13062"], "affected": ">= 13025, < 13062", "ecosystem": "vendor"}]
ecosystems: []
tags: ["eventlog-analyzer", "infrastructure", "log360", "manageengine", "self-hosted"]
not_affected_if: []
published_at: "2026-11-03T08:17:15+00:00"
first_seen_at: "2026-11-03T08:19:30+00:00"
updated_at: "2026-11-03T08:20:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13594", "first_seen_at": "2026-11-03T08:19:30+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-03T08:20:19+00:00"}]
---

# ManageEngine Log360 and EventLog Analyzer builds 13025 to 13061: improper access control allows unauthorized access (fixed in 13062)

Zoho's advisory says an improper access control flaw in Log360 and EventLog Analyzer builds 13025 to 13061 could let an adversary gain unauthorized access to the product. It was fixed in build 13062 on July 6, 2026 by strengthening authentication checks. The advisory does not say whether the attacker needs credentials or what the attack vector is. Reported by tran nghia via Zoho Bug Bounty.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:EventLog Analyzer affected >= 13025, < 13062 fixed 13062
- vendor:Log360 affected >= 13025, < 13062 fixed 13062

## How to check

Find your build number in the product (Log360 or EventLog Analyzer web console, About/build info). Builds 13025 through 13061 are affected; 13062 or later is fixed. Builds below 13025 are not listed by the vendor as affected.

## Fix

Update to build 13062 or later using the service pack (EventLog Analyzer or Log360 service packs page).

## Timeline

- 2026-11-03T08:19:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-13594
- 2026-11-03T08:20:19+00:00 analyst — Vendor advisory read: affected 13025-13061, fixed 13062 (Jul 6 2026); triage title said '13062 and below', which was wrong. Mechanism/auth not disclosed. No exploitation or PoC seen. Sibling CVE-2026-16900/12263 are separate.

## Documents

- [advisory] CVE-2026-13594: Improper Access Control vulnerability in Log360 and EventLog Analyzer https://www.manageengine.com/products/eventlog/advisory/CVE-2026-13594.html
- [fix] Log360 release notes, build 13071 https://www.manageengine.com/log-management/release-notes.html

## From the sources

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_