CVE-2026-13594

Summary

Zoho ManageEngine Log360 and EventLog Analyzer versions 13062 and below contain a vulnerability (CWE-284) that could allow unauthorized access due to improper access control enforcement.

Exploitability

Exploitation likely requires network-level access and no authentication, as indicated by CVSS vector AV:N/AC:L/PR:N/UI:N.

Blast radius

Successful exploitation could lead to full compromise of confidentiality and integrity of the affected system, potentially exposing sensitive log data and enabling further lateral movement.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 13063 or later, as this is the first fixed version following the vulnerable 13062 release.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.