CVE-2026-3324

Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.manageengine.com/log-management/advisory/CVE-2026-3324.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13000::::::
	cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13001::::::
	cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13003::::::
	cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13005::::::
	cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13006::::::
	cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13008::::::
	cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13011::::::
	cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13013::::::

History

No history.

Information

Published : 2026-04-16 15:17

Updated : 2026-08-11 17:10

NVD link : CVE-2026-3324

Mitre link : CVE-2026-3324

CVE.ORG link : CVE-2026-3324

JSON object : View

Products Affected

zohocorp

manageengine_log360

CWE

CWE-288

Authentication Bypass Using an Alternate Path or Channel

{"id": "CVE-2026-3324", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3324", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-16T15:20:35.811371Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "0fc0942c-577d-436f-ae8e-945763c79b02", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "0fc0942c-577d-436f-ae8e-945763c79b02", "affectedData": [{"vendor": "Zohocorp", "product": "ManageEngine Log360", "versions": [{"status": "affected", "version": "13000", "versionType": "13013", "lessThanOrEqual": "13013"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-16T15:17:38.010", "references": [{"url": "https://www.manageengine.com/log-management/advisory/CVE-2026-3324.html", "tags": ["Patch", "Vendor Advisory"], "source": "0fc0942c-577d-436f-ae8e-945763c79b02"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "0fc0942c-577d-436f-ae8e-945763c79b02", "description": [{"lang": "en", "value": "CWE-288"}]}], "descriptions": [{"lang": "en", "value": "Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration."}], "lastModified": "2026-08-11T17:10:35.417", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13000:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EDF0626-16FA-42AC-93CA-6C60B95C0561"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13001:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41D2C851-B5AF-4461-AEA3-0A059561BEC4"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13003:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA21DFA4-9B8A-484A-B442-56144720D82C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13005:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "398E011B-BF1F-420C-8812-18892F65DF27"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13006:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A2E9498-FB13-4ABA-9DA4-CBAF3B01E5FF"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13008:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22E46EE6-CABD-400F-B195-40AE98EBEB81"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13011:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EF2F8E7-CF99-41C8-8767-ECE05C7D27B0"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_log360:13.0:build13013:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71AA6E2B-BC83-4A04-8DBC-8332739FB6B4"}], "operator": "OR"}]}], "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02"}