Authentication Bypass

Summary

Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted registration request.

Remediation

1. Inventory every Zohocorp Log360 deployment, including staging.
2. Upgrade Zohocorp Log360 to 13071.
3. Confirm the running version after the upgrade.

References

• Referencehttps://www.manageengine.com/products/eventlog/advisory/CVE-2026-16900.html