CVE-2026-75825

Summary

This vulnerability allows an attacker to bypass authentication in ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled, leading to unauthorized access and potential system compromise.

Exploitability

Exploitation is relatively straightforward given the preconditions of the Application Manager Plugin being enabled. An attacker would need to have network access to the affected system.

Blast radius

If exploited, this vulnerability could result in unauthorized access to the entire system, leading to data theft, service disruption, or further exploitation of the system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to ZohoCorp ManageEngine OpManager version 12.8.711 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.