Command injection vulnerability

Summary

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA

Remediation

1. Inventory every Zohocorp ManageEngine Key Manager Plus deployment, including staging.
2. Upgrade Zohocorp ManageEngine Key Manager Plus to 7151.
3. Confirm the running version after the upgrade.

References

• Referencehttps://www.manageengine.com/key-manager/advisory/cve-2026-77691.html