CVE-2026-86677

Summary

This flaw allows a low-privileged user to execute unauthorized SQL commands, potentially gaining full administrative access and remote code execution, which can lead to complete compromise of the affected system.

Exploitability

Exploitation is relatively straightforward given that a low-privileged user can initiate the attack, but requires the application to be misconfigured or have certain features enabled.

Blast radius

If exploited, the impact is severe as it can result in unauthorized access and control over the entire system, leading to data theft, system damage, or further attacks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to ManageEngine Applications Manager version 182001 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.