{"id":"CVE-2026-77690","kind":"vulnerability","aliases":["CVE-2026-77690"],"related":[],"title":"ManageEngine Key Manager Plus: command injection lets certificate-deployment users run commands","description":"ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands through specially crafted input when configuring a deployment target.","summary":"ManageEngine Key Manager Plus before build 7151 has a command injection flaw in its certificate deployment target configuration. An authenticated user with certificate deployment privileges can run arbitrary commands on the server through crafted input.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["certificate-management","key-manager-plus","manageengine","vendor","windows"],"not_affected_if":["build-7151-or-later","no-certificate-deployment-privileges"],"how_to_check":"- Look up the installed Key Manager Plus build number in the product's admin console and compare it with `7151`\n- Review which accounts hold certificate deployment privileges, since they are the only ones who can reach the flaw","fix":"- Key Manager Plus: move to build `7151` or later","status":"open","published_at":"2026-11-04T06:17:05+00:00","first_seen_at":"2026-11-04T06:25:20+00:00","triaged_at":"2026-11-04T06:25:52+00:00","updated_at":"2026-11-04T06:25:52+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-11-04T06:25:52Z","model":"claude-haiku-5-5","output":{"fix":"- Key Manager Plus: move to build `7151` or later","reach":"unknown","title":"ManageEngine Key Manager Plus: command injection lets certificate-deployment users run commands","impact":"high","summary":"ManageEngine Key Manager Plus before build 7151 has a command injection flaw in its certificate deployment target configuration. An authenticated user with certificate deployment privileges can run arbitrary commands on the server through crafted input.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["manageengine","key-manager-plus","windows","certificate-management"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"Authenticated user runs arbitrary commands on the Key Manager Plus server","analyst_note":"Check the NVD entry and the ManageEngine security advisory for the exact affected version range and whether the flaw is reachable from the network.","how_to_check":"- Look up the installed Key Manager Plus build number in the product's admin console and compare it with `7151`\n- Review which accounts hold certificate deployment privileges, since they are the only ones who can reach the flaw","plain_action":"","needs_analyst":true,"not_affected_if":["build-7151-or-later","no-certificate-deployment-privileges"],"who_is_affected":"Only installations of Key Manager Plus before build 7151 are exposed, and only through accounts with certificate deployment privileges when configuring a deployment target. Teams that run no Key Manager Plus, or whose builds are at 7151 or later, can skip it. Sources do not say whether the flaw is reachable from outside the network.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000711,"input_tokens":4126,"output_tokens":597,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-77690':16A,19A '7151':36B,72C 'allow':81C 'arbitrari':57B,90C 'authent':49B,82C 'build':35B 'certif':9A,21B,44B,52B,85C 'certificate-deploy':8A 'certificate-manag':20B 'command':5A,13A,39B,58B,77C,91C 'configur':47B,97C 'craft':63B,94C 'cve':14A,17A 'deploy':10A,45B,53B,86C,99C 'execut':89C 'flaw':41B 'inject':6A,40B,78C 'input':64B,95C 'key':2A,24B,31B,67C 'key-manager-plus':23B 'let':7A 'manag':3A,22B,25B,32B,68C 'manageengin':1A,27B,30B,66C 'plus':4A,26B,33B,69C 'privileg':54B,87C 'run':12A,56B 'server':61B 'special':93C 'target':46B,100C 'user':11A,50B,83C 'vendor':28B 'version':70C 'vulner':74C,79C 'window':29B 'zohocorp':65C","nicknames":[],"mitigations":[],"who_affected":"Only installations of Key Manager Plus before build 7151 are exposed, and only through accounts with certificate deployment privileges when configuring a deployment target. Teams that run no Key Manager Plus, or whose builds are at 7151 or later, can skip it. Sources do not say whether the flaw is reachable from outside the network.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["certificatemanagement","high","keymanagerplus","manageengine","vendor","windows"],"campaign_type":null,"first_public_at":"2026-11-04T06:17:05+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"0fc0942c-577d-436f-ae8e-945763c79b02","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-77690","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77690","severity":null,"published_at":"2026-11-04T06:17:05+00:00","modified_at":"2026-11-04T06:17:05+00:00","first_seen_at":"2026-11-04T06:25:20+00:00","fetched_at":"2026-11-04T06:25:20+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}