CVE-2026-135949.1Critical
CVE-2026-13594: Improper Access Control vulnerability
Zohocorp · Log360
Vendor fix available · Affected: Zohocorp Log360 · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.04 (4 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
1.1%probability of exploitation in the next 30 days
66th percentile
050100
Higher than 66% of scored CVEs
9.1CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 6 Nov.
- Zoho patches 11 flaws in ManageEngine security productsSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.