Remote Code Execution

Zohocorp ManageEngine Eventlog Analyzer2026-11-02 10:32 UTC1 min readRead in

Summary

Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option.

Remediation

Inventory every Zohocorp ManageEngine Eventlog Analyzer deployment, including staging.
Upgrade Zohocorp ManageEngine Eventlog Analyzer to 13062.
Confirm the running version after the upgrade.

References

Referencehttps://www.manageengine.com/products/eventlog/advisory/CVE-2026-8923.html

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: High
User interaction: None
Scope: Changed
Confidentiality: High
Integrity: High
Availability: None

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Affected versions

Version	Fixed in
0 – <13062	13062

Weakness

CWE-78

Timeline

2026-11-02Publicly disclosed

Sources

CVE · NVD