Improper access control vulnerability

Summary

ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults.

Remediation

1. Inventory every Zohocorp ManageEngine Key Manager Plus deployment, including staging.
2. Upgrade Zohocorp ManageEngine Key Manager Plus to 7151.
3. Confirm the running version after the upgrade.

References

• Referencehttps://www.manageengine.com/key-manager/advisory/cve-2026-77778.html