CVE-2026-8670810.0CriticalCWE-321
CVE-2026-86708: Sensitive data exposure
Zohocorp · ManageEngine Applications Manager
Vendor fix available · Affected: Zohocorp ManageEngine Applications Manager · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
2.7%probability of exploitation in the next 30 days
86th percentile
050100
Higher than 86% of scored CVEs
10.0CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Zohocorp
- Published
- September 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-86708 yet. New articles appear here and in the RSS feed.