Live › vulnerability › CVE-2026-8923
Versions of ManageEngine Eventlog Analyzer and Log360 before build 13062 contain a flaw in the Log Forward option. A logged-in user can use it to run code on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 11:22 UTC. All times on this page are UTC.
Any ManageEngine Eventlog Analyzer or Log360 instance running a build before 13062 is affected. The attacker needs a valid account on the product, so exposure depends on who can log in. unknown whether the Log Forward feature must be enabled for the flaw to be reachable.
No product ranges from the sources yet.
1306213062 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option.
This page as .md · .json · in your agent: get_signal("CVE-2026-8923")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.