CVE-2026-16900

CVSS 7.5 (high) · published 2026-11-03

Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.

Weakness: CWE-284

Source: NVD CVE-2026-16900

References

• https://www.manageengine.com/products/eventlog/advisory/CVE-2026-16900.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.