CVE-2026-77779

CVSS 7.7 (high) ยท published 2026-11-04

ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated low-privilege users to export keys outside their authorized scope.

Weakness: CWE-1220

Source: NVD CVE-2026-77779

References

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.