{"id":"CVE-2026-77778","kind":"vulnerability","aliases":["CVE-2026-77778"],"related":[],"title":"ManageEngine Key Manager Plus: logged-in users can export other users' certificates","description":"ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.","summary":"Key Manager Plus up to version 7150 lets any authenticated user export certificates that belong to other users into their own registered key vaults. An attacker with a normal account can take certificates and keys they should not be able to see.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["key-manager-plus","manageengine","self-hosted","vendor"],"not_affected_if":["no-untrusted-accounts","single-user-instance"],"how_to_check":"- Check the installed Key Manager Plus build against the version range in the advisory; the sources do not give a command for this.","fix":"- Move Key Manager Plus past `7150`; the sources do not name the fixed version.","status":"open","published_at":"2026-11-03T10:17:19+00:00","first_seen_at":"2026-11-03T10:20:16+00:00","triaged_at":"2026-11-03T10:20:35+00:00","updated_at":"2026-11-03T10:20:35+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-03T10:20:35Z","model":"claude-haiku-5-5","output":{"fix":"- Move Key Manager Plus past `7150`; the sources do not name the fixed version.\n- unknown","reach":"network","title":"ManageEngine Key Manager Plus: logged-in users can export other users' certificates","impact":"high","summary":"Key Manager Plus up to version 7150 lets any authenticated user export certificates that belong to other users into their own registered key vaults. An attacker with a normal account can take certificates and keys they should not be able to see.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["manageengine","key-manager-plus","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"authenticated user reads other users' certificates and keys","analyst_note":"Confirm the fixed version and any vendor advisory from the NVD entry; the sources list no fix or check.","how_to_check":"- Check the installed Key Manager Plus build against the version range in the advisory; the sources do not give a command for this.\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-untrusted-accounts","single-user-instance"],"who_is_affected":"Organizations that run ManageEngine Key Manager Plus at or below version 7150 and let more than one user register key vaults. Exposure depends on users with valid accounts on the server; instances without multiple authenticated users are less exposed. unknown for anything beyond that.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000674,"input_tokens":4086,"output_tokens":530,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-77778':16A,19A '7150':35B,79C 'abl':68B 'account':58B 'allow':80C 'attack':54B 'authent':38B,81C 'belong':43B,86C 'certif':13A,41B,61B,85C 'cve':14A,17A 'export':10A,40B,84C 'host':27B 'key':2A,21B,29B,51B,63B,73C,94C 'key-manager-plus':20B 'let':36B 'log':6A 'logged-in':5A 'manag':3A,22B,30B,74C 'manageengin':1A,24B,72C 'normal':57B 'plus':4A,23B,31B,75C 'regist':50B,93C 'see':70B 'self':26B 'self-host':25B 'take':60B 'user':8A,12A,39B,46B,82C,89C 'vault':52B,95C 'vendor':28B 'version':34B,76C 'zohocorp':71C","nicknames":[],"mitigations":[],"who_affected":"Organizations that run ManageEngine Key Manager Plus at or below version 7150 and let more than one user register key vaults. Exposure depends on users with valid accounts on the server; instances without multiple authenticated users are less exposed. unknown for anything beyond that.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","keymanagerplus","manageengine","selfhosted","vendor"],"first_public_at":"2026-11-03T10:17:19+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss_by":"0fc0942c-577d-436f-ae8e-945763c79b02","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-77778","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77778","severity":null,"published_at":"2026-11-03T10:17:19+00:00","modified_at":"2026-11-03T10:17:19+00:00","first_seen_at":"2026-11-03T10:20:16+00:00","fetched_at":"2026-11-03T10:20:16+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}