Live › vulnerability › CVE-2026-77777
Key Manager Plus versions before 7151 have an improper access control flaw. An authenticated user can modify another user's ACME certificate deployment credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 10:20 UTC. All times on this page are UTC.
Teams that run ManageEngine Key Manager Plus before version 7151 and have more than one user account with access to certificate deployment. The sources do not say whether a default setup is exposed; the flaw requires a valid login.
No product ranges from the sources yet.
7151 are affected.7151 or later (per the sources; confirm against the vendor advisory).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials.
This page as .md · .json · in your agent: get_signal("CVE-2026-77777")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.