Zoho ManageEngine Log360/EVENTLOG Analyzer Unauthorized Access Vulnerability
CVE-2026-13594 Published on November 3, 2026
Improper Access Control vulnerability
Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.
Vulnerability Analysis
CVE-2026-13594 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-13594 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2026-13594
stack.watch emails you whenever new vulnerabilities are published in Zoho Corp Log360 or Zoho Corp Eventlog Analyzer. Just hit a watch button to start following.
Affected Versions
Zohocorp Log360:- Before 13062 is affected.
- Before 13062 is affected.