Live › vulnerability › CVE-2026-77691
ManageEngine Key Manager Plus versions before 7151 accept malicious input when an authenticated user configures a Microsoft certificate authority. The sources do not state the exact impact beyond this input handling flaw.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 10:20 UTC. All times on this page are UTC.
Organisations running ManageEngine Key Manager Plus before version 7151 that have Microsoft CA integration configured. The attacker needs a valid user account, so the exposure is limited to authenticated users who can reach the configuration screen.
No product ranges from the sources yet.
71517151 or later (per the NVD description)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA
This page as .md · .json · in your agent: get_signal("CVE-2026-77691")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.